Home

SRC PE Software Monitoring and Troubleshooting Guide

1. 000 cee 47 Simulated Subscribers OvervieW 6 eee eee eens 47 Commands to Manage Simulated Subscribers 2 0 0 0000 eee 47 Logging In Simulated Subscribers SRC CLI 0 0 0 0 0 ee 48 Logging In Authenticated DHCP Subscribers 00000 eee ee 48 Logging In Authenticated Interface Subscribers 49 Logging In Unauthenticated DHCP Subscribers 50 Logging In Unauthenticated Interface Subscribers 50 Viewing Subscriber Sessions SRC CLI 0 eee 5 Logging Out Simulated Subscribers SRC CLI 0 cee eee 52 Logging Out Subscribers by DN 1 eee 52 Logging Out Subscribers by IP Address 0 00 00 eee 52 Logging Out Subscribers by Login Name 0 0 cee eee eee 53 Logging Out Subscribers by Session ID 0 naana nanana aeaaea 53 Using SNMP for Monitoring and Troubleshooting Creating Custom SNMP Monitors 0 ccc cece eee 57 SNMP Monitoring on C Series Controllers 2 eee 57 Configuration Statements for Customized SRC SNMP Monitors 59 Configuring an SNMP Alarm on aC Series Controller SRC CLI 60 Defining an Alarm for an SNMP Monitor That Compares Object Values SRC Cl ro cahase s too ha akee Sag keweeed QUee tele ins pewete Hace bee eens 61 Defining an Alarm to Monitor the Status of an Object SRC CLI 62 Defining an Alarm for an SNMP Monitor That Compares Values Against
2. 155 Viewing Information About Threads C Web Interface 156 Viewing Information About Subscriber Sessions C Web Interface 157 Information about Subscriber SessionS 0 0 00 cece ee eee 157 Viewing Information About Subscriber Sessions by DN C Web ITSP ACED aar new are ne Sebewe dl ae eden due ei ay oner Qed 158 Viewing Information About Subscriber Sessions by IP Address C Web Mtera aea sanaaa ea E h a age aner Aceon wean ante 159 Viewing Information About Subscriber Sessions by Login Name C Web AEST ACEN coh ass recite avd des Btn dete Aes Gch ded ade den aan Rear r Gabe 160 Viewing Information About Subscriber Sessions by Service Name C Web Menace cate chs Grace cetera wauted a ya seen Moe andreas 161 Viewing Information About Subscriber Sessions by Session ID C Web Interface 2 eee eee eee eee eens 162 Viewing SNMP Information C Web Interface 0 0 0 0c eee 163 Viewing SNMP Statistics for the Directory C Web Interface 163 Viewing SNMP Statistics for Directory Connections C Web Interface 164 Viewing SNMP Statistics for Client Licenses C Web Interface 165 Viewing SNMP Statistics for Licenses by Device C Web Interface 166 Viewing SNMP Statistics for Local Licenses C Web Interface 167 Viewing SNMP Statistics About Policies C Web Interface 168 Viewing SNMP Statistics About Server Processes C Web Interface 169
3. Viewing SNMP Information for Routers and Devices SRC CLI on page 144 e Viewing Statistics for Device Drivers SRC CLI on page 145 e Viewing Statistics for Specific Device Drivers SRC CLI on page 146 Copyright 2013 Juniper Networks Inc 139 SRC 4 6 x Monitoring and Troubleshooting Guide e Viewing Statistics for Subscriber and Service Sessions SRC CLI on page 147 Monitoring Statistics for Subscriber and Service Sessions SRC CLI on page 148 Viewing Statistics About the Directory SRC CLI Purpose View statistics about the directory Action user host gt show sae statistics directory SNMP Statistics Services read Services written Subscriptions read Subscriptions written Users read Users written ooooouwm Related Configuring the Directory Location for SAE Data C Web Interface Documentation Viewing Statistics for Directory Connections SRC CLI on page 140 e Viewing SNMP Statistics for the Directory C Web Interface on page 163 e Viewing SNMP Statistics for Directory Connections C Web Interface on page 164 Viewing Statistics for Directory Connections SRC CLI Purpose View information for all or specific directory connections Action To view statistics for directory connections user host gt show sae statistics directory connections DES connection Connection ID FEEDBACK_DATA_MANAGER Number of read 93 Number of write 93 Number of events sent 0 Number of events dropped 0 Aver
4. 142 Viewing SNMP Information for Licenses on Virtual Routers SRC CLI 142 Viewing SNMP Information for Policies SRC CLI 143 Viewing SNMP Information for the SAE Server Process SRC CLI 143 Viewing Statistics for RADIUS Clients SRC CLI 0 0 0 0 eee 144 Viewing SNMP Information for RADIUS Clients SRC CLI 144 Viewing SNMP Information for Routers and Devices SRC CLI 144 Viewing Statistics for Device Drivers SRC CLI 0 0 0 0 cee ee eee 145 Viewing Statistics for Specific Device Drivers SRC CLI 146 Viewing Statistics for Subscriber and Service Sessions SRC CLI 147 Monitoring Statistics for Subscriber and Service Sessions SRC CLI 148 Chapter 16 Monitoring SAE Data C Web Interface 0 c cece eee eee 149 Viewing SAE Data C Web Interface 6 eee eee 149 Viewing Information About the Directory Blacklist C Web Interface 149 Viewing Information About Services C Web Interface 150 Viewing Information About Licenses C Web Interface 151 Viewing Information About Policies C Web Interface 151 Viewing Information About Device Drivers C Web Interface 152 Viewing Information About Interfaces C Web Interface 153 Viewing Equipment Registrations C Web Interface 154 Viewing Login Registrations C Web Interface
5. Information about Subscriber Sessions You can list subscriber sessions by the distinguished name DN of the subscriber entry in the directory by login name or by session ID You can also list subscriber sessions by IP address for Dynamic Host Configuration Protocol DHCP subscribers authenticated Point to Point Protocol PPP subscribers and static IP subscribers who are being managed by the SAE Related Viewing Information About Subscriber Sessions by DN C Web Interface on page 158 Documentation Viewing Information About Subscriber Sessions by DN SRC CLI on page 133 Copyright 2013 Juniper Networks Inc 157 SRC 4 6 x Monitoring and Troubleshooting Guide e Viewing Information About Subscriber Sessions by IP Address VPN Identifier or both SRC CLI on page 134 Viewing Information About Subscriber Sessions by Login Name C Web Interface on page 160 Viewing Information About Subscriber Sessions by Login Name SRC CLI on page 135 Viewing Information About Subscriber Sessions by Service Name C Web Interface on page 161 Viewing Information About Subscriber Sessions by Service Name SRC CLI on page 136 Viewing Information About Subscriber Sessions by Session ID C Web Interface on page 162 Viewing Information About Subscriber Sessions by Session ID SRC CLI on page 137 Viewing Information About Subscriber Sessions by DN C Web Interface 158 View information about subscriber s
6. S Severity level of the trap MINOR MAJOR CRITICAL or CLEAR D Status data P Polling interval T Threshold value A Trap action displayed as RAISED or CLEARED L Exceeded if the trap is raised is below if the trap is cleared SRC performance trap tables contain a trap ID text displayed and default values for alarm threshold levels as well as rate R and absolute values AV fields Copyright 2013 Juniper Networks Inc 83 SRC 4 6 x Monitoring and Troubleshooting Guide R AV Related Documentation Each performance trap table has a field called R AV R means rate and AV means absolute value Rate is used for variables that are counters The rate is the difference between the current value of the underlying MIB variable being monitored and its previous value which was read lt interval gt time ago The interval length affects those values that are appropriate for the thresholds that is the longer the interval the larger the thresholds must be For instance saeLogins is a counter of the total number of SAE logins With the default interval of 60 seconds the critical threshold of 2 000 means that a critical trap is sent if there are more than 2 000 logins within one minute If you change the interval to 300 seconds 5 minutes to keep the critical threshold at 2 000 logins a minute you need to change the threshold to 10 000 the number of logins in 5 minutes for arate of 2 000 per minute
7. 0 0 ce eee 31 Configuring the Global Options for the Logrotate Utility 35 Configuring Log Rotation Options for Specific Logging Configuration FESD ET ES TE Eee 35 Configuring Logging Rotation Options for System and SRC Components CS CIGD 5 gtd a E Ea a a E ee ewe 36 SRC 4 6 x Monitoring and Troubleshooting Guide vi Chapter 4 Part 3 Chapter 5 Chapter 6 Chapter 7 Part 4 Chapter 8 Configuring Logging for SRC Components C Web Interface 37 Before You Configure Logging for SRC Components 37 Configuring ACP to Store Log Messages in a File C Web Interface 37 Configuring the SAE to Store Log Messages in a File C Web Interface 38 Configuring NIC to Store Log Messages in a File C Web Interface 38 Configuring the SNMP to Store Log Messages in a File C Web Interface 39 Configuring JPS to Store Log Messages in a File C Web Interface 39 Using Simulated Router Drivers and Simulated Subscribers for Testing Configuring a Simulated Router Driver for Testing SRC CLI 43 Simulated Router Drivers for the SRC Software Overview 43 Configuring Simulated Router Drivers SRC CLI 00 00 eee 43 Configuring a Simulated Router Driver for Testing C Web Interface 45 Configuring a Simulated Router Driver for Testing C Web Interface 45 Using Simulated Subscribers for Testing SRC CLI
8. 118 Viewing Information About System Disk Status C Web Interface 119 Viewing Information About the Users on the System C Web Interface 119 Viewing Information About the Juniper Networks Database in Community Mode C Web Interface eee eee teens 120 Viewing Statistics for the Juniper Networks Database C Web Interface 121 Viewing Information About the SRC CLI C Web Interface 121 Viewing Information About the SRC CLI C Web Interface 121 Viewing Information About SRC CLI User Permissions C Web terasse aa reen i AE REDES E oak a a E i 122 Monitoring SAE Data SRC CLl 0c cece ect eee eeees 123 Viewing SAE Data With the CEN siesta pas nart Eno re EN be ee KN dou eete 123 Viewing Information About the Directory Blacklist SRC CLI 123 Viewing Information About SAE Device Drivers SRC CLI 124 Viewing the Synchronization Status of SAE Session Stores SRC CLI 125 Viewing Information About SAE Interfaces SRC CLI 126 Viewing Information About SAE Licenses SRC CLI 126 Viewing Information About Policies on the SAE SRC CLI 127 Viewing Login Registrations SRC CLI 0 0 0 00 eee 128 Viewing Equipment Registrations SRC CLI 0000 c eee 129 Viewing Information About Services SRC CLI 0 000000 129 Viewing Information About Threads SRC CLI 0 0 0 1
9. Action Click Monitor gt System gt LDAP gt Statistics The Statistics pane appears and displays local Juniper Networks database statistics Configure Diagnose Manage as sleswayball Update Preferences About Logout System Ldap Statistics Component Date Local JDB statistics Disk Number of Add operations since startup 993 Interfaces Number of Delete operations since startup 0 Number of Modify operations since startup 282 Number of Rename operations since startup o Number of Read operations since startup 480933 Number of List operations since startup 93821 Number of Subtree Search operations since startup 367916 Number of Bind operations 18266 Number of Anonymous Bind operations since startup 18232 Number of Compare operations since startup 0 Number of current connections 19 Number of all connections since startup 18266 Number of bind errors since startup Q Number of all errors since startup 226721 All Rights Reserved Trademark Notice Privacy ETA RENSE Related Troubleshooting Data Synchronization for Juniper Networks Databases SRC CLI D tati ocumentaton e Viewing Information About the Juniper Networks Database in Community Mode C Web Interface on page 120 Viewing Information About the SRC CLI C Web Interface You can view information about the current user s permissions and editing level for the SRC CLI by Viewing Information About the SRC CLI C Web Interface on page 121
10. Configuring NIC to Store Log Messages in a File C Web Interface on page 38 Configuring the SNMP to Store Log Messages in a File C Web Interface on page 39 Configuring JPS to Store Log Messages in a File C Web Interface on page 39 Before You Configure Logging for SRC Components Before you configure logging for SRC components you should be familiar with the logging filters that you can configure If you use a system logging facility you should be familiar with the system log protocol For information about logging filters see Logging for SRC Components Overview on page 7 If you plan to filter log messages you should be familiar with severity levels and filters for logging before you configure system logging for a component See Categories and Severity Levels for Event Messages on page 7 Related Configuring System Logging SRC CLI on page 28 Documentation Configuring an SRC Component to Store Log Messages in a File SRC CLI on page 26 Configuration Statements for SRC Component Logging on page 25 Configuring ACP to Store Log Messages in a File C Web Interface To configure component logging for ACP 1 Click Configure expand Shared expand ACP and then click Configuration The Configuration pane appears 2 From the Create new list select Logger Copyright 2013 Juniper Networks Inc 37 SRC 4 6 x Monitoring and Troubleshooting Guide 3 4 5 Related Documentation In the dialog
11. Configuring SAE Properties for Global Default SNMP Communities for Use with JunosE Routers and Devices Running Junos OS Viewing SNMP Statistics for Licenses by Device C Web Interface on page 166 e Viewing SNMP Statistics for Local Licenses C Web Interface on page 167 e Viewing SNMP Statistics for Client Licenses C Web Interface on page 165 e Viewing SNMP Information for Licenses on Virtual Routers SRC CLI on page 142 Viewing SNMP Information for Licenses on Virtual Routers SRC CLI 142 Purpose Action View SAE license information for the SRC software To view SNMP information about the state of licenses on specified virtual routers user host gt show sae statistics license device To view information about the state of licenses for a particular virtual router specify all or part of the VR name For device drivers running Junos OS and PCMM drivers use the format default routerName user host gt show sae statistics license device name name To view only the virtual router names user host gt show sae statistics license device brief Copyright 2013 Juniper Networks Inc Related Documentation Chapter 15 Monitoring SAE Data SRC CLI Configuring SAE Properties for Global Default SNMP Communities for Use with JunosE Routers and Devices Running Junos OS e Viewing SNMP Statistics for Local Licenses C Web Interface on page 167 e Viewing SNMP Statistics for Client Licenses C Web Interface on page
12. Viewing NTP Peers C Web Interface on page 195 e Viewing Statistics for NTP C Web Interface on page 196 e Viewing NTP Status C Web Interface on page 196 Viewing Information About Components Installed C Web Interface Purpose View the installed SRC components Action Click Monitor gt Component The Component pane displays the status of each installed component Configure Diagnose Manage Logged in as admin Refresh Preferences About Logout Component Installed Components Name Version Status Dek di Release 1 1 Build hstewart SDX 7 1 0 unix 200707 running Sener aces acp Release 7 1 Build hstewart_SDX_7 1 0_unix 200708 stopped Wiin editor Release 7 1 Build hstewart_SDX_7 1 0_unix 200708 running as jdb Release 7 0 Build DIRXA A MAIN 1123 running redir Release 7 0 Build REDIR A MAIN 1136 disabled nic Release 7 1 Build hstewart_SDX_7 1 0_unix 200708 stopped sae Release 7 1 Build hstewart_SDX_7 1 0_unix 200708 stopped www Release 7 0 Build UMC A MAIN 1093 disabled ips Release 7 1 Build hstewart_SDX_7 1 0_unix 200708 disabled agent Release 7 1 Build hstewart_SDX_7 1 0_unix 200708 stopped webadm Release 7 1 Build hstewart_SDX_7 1 0_unix 200708 running 7 Junip Inc All Rights Reserved Trademark Notice Privacy Juniper yor Net Related Viewing Information About Components Installed SRC CLI on page 111 D tati ee eee a Viewing C Series Controller Information Directories on the C Series Controller
13. 2013 Juniper Networks Inc 27 SRC 4 6 x Monitoring and Troubleshooting Guide 6 Optional Specify the maximum size of the log file and the rollover file edit shared sae configuration logger sae file log 1 file user host set maximum file size maximum file size aa NOTE The maximum file size is specified in KB Maximum size of the log file is 10 000 000 KB Do not set the maximum file size to a value greater than the available disk space Related Configuring System Logging SRC CLI on page 28 Documentation Saving System Log Messages to a File SRC CLI Sending System Log Messages to Other Servers SRC CLI Before You Configure Logging for SRC Components on page 37 Logging for SRC Components Overview on page 7 Configuring System Logging SRC CLI Use the following statements to configure the SRC software to send log messages to the system logging facility logger name syslog filter filter host host facility facility format format port port 3 You can configure components to send log messages to the system log server on the platform on which the SRC software is running If you plan to filter log messages you should be familiar with severity levels and filters for logging before you configure system logging for a component See Categories and Severity Levels for Event Messages on page 7 To configure component logging to the system log server 1 From configuration mode access t
14. InterimSessionJobManager info error debug lpInterfaceCtx info error debug ISEExtintf error debug ISEPORetriever error debug ISEProvisioningContext error ISERouterDriver info warning error debug ISESolicitedJob info warning error debug JobQueue info debug_9 JunoScriptConfHelper info JunoScriptSubChannelHandler debug trace JunosDriverManager info error debug JunosEDriverManager info error debug JunosElcc error debug JunoseJob error debug JunosERouterDriver info error debug debug_9 perf JunosERouterFactory info JunosEXDRRouterDriver info error debug debug_9 perf JunosRouterDriver info error debug debug 9 JunosRouterFactory info JunosServiceActivationPoint error debug Copyright 2013 Juniper Networks Inc SRC 4 6 x Monitoring and Troubleshooting Guide Table 3 SAE Categories and Severity Levels continued Category Extension Severity Level JunosSessionManager error debug JunosSyslogConfigHandler info error debug JunosSyslogSubChannelHandler info error debug KeepAliveTimer error LdapAuthenticator error debug LDAPConfManager error LicenseCheck info error LicenseLDAPListener debug LicenseManager info error debug LicenseServerClient info error debug LicenseUtil debug LimitNumSubscriberPerlntfAuthPluginListene
15. xii Copyright O 2013 Juniper Networks Inc List of Tables Part 2 Chapter 2 Chapter 3 Part 4 Chapter 8 Chapter 11 About the DOCUMENtALION 5 rese Ennn nET AAEE EE XV Table l NOICE ICONS r aa rs BASEREDE e ea dda xvi Table 2 Text CONVENTIONS ar rer mete ER ada aetna LEANA RASER xvi Using Logging for the SRC Software and C Series Controllers Configuring Logging for SRC ComponentsS 00ce eee eee eee eee 7 Table 3 SAE Categories and Severity LevelS 0 0 ccc eee 8 Table 4 Named Severity LevelS 0 0 0 0 eee eee ee eee 18 Table 5 Examples of Filters for Event Messages 0 0 00 ce ee eee 20 Table 6 SAE Debug Device Filter Formatting Rules 00 21 Table 7 Sample Combinations of Conditions for the device filter key EXpresslOMscc bs bre sct deg aaeiea ok ee oar a paren ENDE 22 Configuring Logging for SRC Components with the CLI 25 Table 6 Logrotate Optoms 2 a seeks we akodceteinos ie ween ale aXe oa es ame ee 32 Table 9 Options for Specifying How Log Files are Created 34 Using SNMP for Monitoring and Troubleshooting Creating Custom SNMP Monitors 000 e cece eee 57 Table 10 Example Table for juniSaeRouterTable Object 66 Understanding Traps c i0c05 0i3chavec ew aidewdadane aceasta aa 83 Table 11 Symbols in Performance Traps TableS 0 0 00 c cece eee ee 83 Table 12 Performance TrapS SAE 1
16. Copyright 2013 Juniper Networks Inc 45 SRC 4 6 x Monitoring and Troubleshooting Guide 46 Copyright O 2013 Juniper Networks Inc CHAPTER 7 Using Simulated Subscribers for Testing SRG CLI e Simulated Subscribers Overview on page 47 Commands to Manage Simulated Subscribers on page 47 Logging In Simulated Subscribers SRC CLI on page 48 Viewing Subscriber Sessions SRC CLI on page 51 Logging Out Simulated Subscribers SRC CLI on page 52 Simulated Subscribers Overview Simulated subscribers allow you to create subscriber sessions without connecting to a router or other device When developing an application you can log in as a simulated subscriber to test a portal without a router or a client PC You can log out from the simulated subscriber session in the same way that you log out from other subscriber sessions Related Logging In Simulated Subscribers SRC CLI on page 48 Documentation Logging Out Simulated Subscribers SRC CLI on page 52 e Viewing Subscriber Sessions SRC CLI on page 51 Commands to Manage Simulated Subscribers on page 47 Commands to Manage Simulated Subscribers You can use the following operational mode commands to manage simulated subscribers request sae login ipv4 authenticated dhcp request sae login ipv4 authenticated interface request sae login ipv4 unauthenticated dhcp request sae login ipv4 unauthenticated interface request sae logout dn request s
17. D NOTE Configure only one monitor test at a time Before you define an alarm type configure the associated SNMP alarm See Configuring an SNMP Alarm on a C Series Controller SRC CLI on page 60 To configure an alarm for a monitor that compares a sample value to an upper threshold value and a lower threshold value 1 Define the upper threshold against which to compare a rising sample value For example edit snmp monitor alarm thresholds threshold test user host set rising threshold 2 2 Define the lower threshold against which to compare a falling sample value For example edit snmp monitor alarm threshold alarm user host set falling threshold 1 e Defining an Alarm for an SNMP Monitor That Compares Object Values SRC CLI on page 61 Defining an Alarm to Monitor the Status of an Object SRC CLI on page 62 Configuring an SNMP Alarm ona C Series Controller SRC CLI on page 60 Configuration Statements for Customized SRC SNMP Monitors on page 59 SNMP Monitoring on C Series Controllers on page 57 Defining a Discontinuity Check to Validate Delta Values SRC CLI You can configure a monitor to use a discontinuity check to prevent sending false alarms when the value of the monitored object is reset between two samples Use a discontinuity check when the sampling type for a monitor is delta value and the test type is Boolean or threshold You define a variable called a discontinuity marker a MIB object
18. SNMP agent appsvr Application server e cli SRC CLI diameter Diameter application dsa Dynamic Service Activator extsubmon External Subscriber Monitor ims IP multimedia subsystem jdb Juniper Networks database jos Juniper Policy Server licSvr License server e nic Network information collector redir Redirect server e sae SAE webadm C Web interface To perform data collection for a specified number of days user host gt request support information days where days is in the range of 1 36500 Related Viewing Graphs C Web Interface on page 212 Documentation e Viewing Graphs from a Web Page on page 212 Monitoring Activity on C Series Controllers on page 209 Collecting Data with the Activity Monitor C Web Interface You can collect data with the Activity Monitor for specific components over a specified time Before you configure data collection for the Activity Monitor make sure the Activity Monitor activity CLI cli and C Web interface webadm components are enabled Copyright 2013 Juniper Networks Inc 211 SRC 4 6 x Monitoring and Troubleshooting Guide Related Documentation To perform data collection with the Activity Monitor 1 Click Manage gt Request gt Support gt Information The Support Information pane appears 2 From the Components list select the components you want to monitor and click OK 3 Optional Enter the number of da
19. SRC components and applications generate event messages that you can save in logs either by writing the messages to text files or by using the system log facilities You can use these logs to monitor the SRC components and troubleshoot problems Each SRC component has its own logging configuration For example the license server the NIC the SAE and SNMP each have logging configuration The C Series Controller includes a system log server that you can configure to manage messages generated on that platform You can use the CLI and the C Web interface to configure logging ona C Series Controller and to configure the system log server on a C Series Controller When you enable logging to a file by default SRC components and applications write log files to the opt UMC lt component directory gt var log folder for a component such as opt UMC sae var log All log files with the file extension log in a var log directory are Rotating Log Files on page 22 C Series Controller Log Server Overview The system log Protocol draft ietf syslog protocol 16 txt July 2006 expiration Configuring the SRC SNMP Agent SRC CLI Configuration Statements for SRC Component Logging on page 25 e Categories and Severity Levels for Event Messages on page 7 Categories and Severity Levels for Event Messages Copyright 2013 Juniper Networks Inc In the logging configuration you can specify a filter for each type of log This filter
20. Viewing Information About SRC CLI User Permissions C Web Interface on page 122 Viewing Information About the SRC CLI C Web Interface Purpose View information about the current user s command completion setting and editing level for the SRC CLI Action Click Monitor gt CLI The CLI pane appears and displays the information about the CLI Copyright 2013 Juniper Networks Inc 121 SRC 4 6 x Monitoring and Troubleshooting Guide Configure Diagnose Manage Logged in as admin Refresh Preferences About Logout CLI complete on space set to off Component CLI editing level is expert Date Disk Interfaces iptables Redirect Server Route SAE System Juniper ger Net 37 Juniper Networks Related Creating an SRC Configuration Documentation crarting the SRE CEI Viewing Settings for the SRC CLI e Viewing Information About SRC CLI User Permissions C Web Interface on page 122 Viewing Information About SRC CLI User Permissions C Web Interface Purpose To display information about the current user s permissions for the SRC CLI Action Click Monitor gt CLI gt Authorization The Authorization pane appears and displays the current user s permissions for each SRC CLI option Configure Diagnose Manage Logged in as admin Refresh Preferences About Logout Authorization Component Current user admin class super user Date Permissions Disk admin
21. When the software determines that an event message matches a subexpression the software logs or ignores the message accordingly You can specify an unlimited number of subexpressions however the order in which you specify the subexpressions affects the result Copyright 2013 Juniper Networks Inc 19 SRC 4 6 x Monitoring and Troubleshooting Guide Table 5 on page 20 shows some examples of filters Table 5 Examples of Filters for Event Messages Syntax Event Messages Saved All event messages info Event messages of level info and above from all categories Cops debug Debug events from COPS category only Cops debug All debug events except those from COPS category CopsMsg info CopsMsg Cops_ All messages from COPS category except those from CopsMsg category with level less than info Enabling Network Device Specific Filtering for SAE Debug Logs SRC CLI 20 You can enable network device specific filtering for SAE debug logs based on router name interface name or login name by including the device filter key option under the shared sae configuration logger hierarchy level Enabling network device specific SAE debug log filtering reduces the size of the debug log files thereby simplifying troubleshooting and minimizing the impact on SAE performance You can enable network device specific filtering of SAE debug logs only if you set the SAE severity level to debug and then include the device filter k
22. You can list subscriber sessions by IP address VPN identifier or both for Dynamic Host Configuration Protocol DHCP subscribers authenticated Point to Point Protocol PPP subscribers and static IP subscribers who have logged in to the portal To view information about subscriber sessions that are accessible by IP address user host gt show sae subscribers ip To view information about a particular subscriber session that is accessible by IP address user host gt show sae subscribers ip address address To view information about subscriber sessions that are accessible by VPN identifier user host gt show sae subscribers ip vpnid vpnid To view information about a particular subscriber session that is accessible by both IP address and VPN identifier user host gt show sae subscribers ip address address vpnid vpnid To view information about particular subscriber sessions specify the IP address user host gt show sae subscribers ip filter filter To view the subscriptions and service sessions from hidden services user host gt show sae subscribers ip secret user host gt show sae subscribers ip filter filter secret Copyright 2013 Juniper Networks Inc Related Documentation Chapter 15 Monitoring SAE Data SRC CLI To view only the subscriber session information without service sessions user host gt show sae subscribers ip brief user host gt show sae subscribers ip filter filter brief To view the subscriber sess
23. ce eens 86 Table 13 Performance Traps AcCcounting nsaan aaura anaana 88 Table 14 Performance Traps Authentication 0 0 0 000 ee 90 Table 15 Performance Traps NIC 0 ee eee 91 Table 16 Performance Traps Router Drivers sssusa urranna raene eee 92 Table 17 Performance Traps System Management Event 94 Table 18 Performance Traps Policy Engine 2 0 0 eee 94 Table 19 Performance Traps SRC Redirector 0 0 0 c cee eee eee 95 Table 20 Performance Traps SRC ACP ee ee 95 Table 21 Performance Traps JPS 2 0 eee eee 96 Table 22 Performance Traps Chassis anunua ananena 97 Table 23 Event MaD oe are d areae gr erkende a e E e DRE ET EDER 97 Table 24 Alarm State Transitions 0 0 0 ccc eee ees 100 Copyright 2013 Juniper Networks Inc xiii SRC 4 6 x Monitoring and Troubleshooting Guide xiv Part 5 Chapter 12 Chapter 13 Chapter 17 Chapter 19 Monitoring the SRC Software and the C Series Controller with the C Web Interface and the SRC CLI Monitoring with the SRC CLI and the C Web Interface 105 Table 25 Comparison of SRC Monitoring Options 106 Monitoring the System SRC CLI 0 cece eee eee 109 Table 26 Output Fields for show component 0 000 eee 111 Monitoring and Troubleshooting the NIC SRC CLI 000 eee 175 Table 27 Commands to Display NIC Statistics 0
24. e show acp remote update subscriber e show acp statistics device show acp statistics directory show acp Statistics general qu SRC CLI level and authorization data e show cli show cli authorization Component Installed components e show component Date System date and time e show date Disk System disk status e show disk status Interfaces System interfaces e show interfaces Iptables Filtered traffic statistics from the iptables Linux show iptables tool JPS Juniper Policy Server JPS data and statistics e show jps statistics e show jps statistics am e show jps statistics am connections e show jps statistics cmts locator e show jps statistics cmts e show jps statistics_cmts connections e show jps statistics message handler e show jps statistics message handler message flow e show jps statistics process e show jps statistics rks 106 Copyright 2013 Juniper Networks Inc Chapter 12 Monitoring with the SRC CLI and the C Web Interface Table 25 Comparison of SRC Monitoring Options continued C Web Interface Monitor Option Information Displayed Corresponding SRC CLI Commands NIC Network information collector NIC e show nic data component configuration data and statistics e show nic data agent including NIC agents resolvers and process e show nic data resolver e show nic statistics e show nic statistics agent e show nic statistics host e show nic statistics proce
25. saeServiceDeactivations 5 S SAE During 2000 1000 500 60 R the last Ps D services were deactivated This L the threshold of T service deactivations A saeCurrentUsers 6 S SAE The 18000 14000 12000 60 AV number of user sessions is D This L the threshold of T users sessions A saeUserNumberLicense 7 S SAE D of 99 95 90 60 AV the available licenses are in use This L the threshold of T A saeUserLicenseExpiry 8 S SAE The SAE 10 14 3500 AV license is about to expire in D days This L the threshold of T A saeClientLicExpiry 12 S SAE Theclient 90 70 40 900 AV has consumed D of its available license This L the threshold of T A Related Performance Traps on page 83 D mentation ocumengato Trap Numbers in Performance Traps on page 84 Copyright 2013 Juniper Networks Inc 87 SRC 4 6 x Monitoring and Troubleshooting Guide Configuring Performance Traps SRC CLI on page 80 Accounting Performance Traps Table 13 on page 88 lists the performance traps for accounting Table 13 Performance Traps Accounting Alarm Threshold Levels default values Trap Interval Trap Event ID Text Displayed Critical Major Minor sec R AV 2 1 R saeAccinvalidServerAddresses 20 S SAE RADIUS 5 60 Accounting Client During the last Ps D invalid server address errors occurred This L the threshold of T invalid server address errors A saeAccRoundTrip
26. 2 Heap limit 910016 kilo bytes Threads 96 Up time 80877 seconds since Tue Jan 23 19 51 42 EST 2007 Configuring SAE Properties for Global Default SNMP Communities for Use with JunosE Routers and Devices Running Junos OS e Viewing SNMP Statistics About Server Processes C Web Interface on page 169 Copyright 2013 Juniper Networks Inc 143 SRC 4 6 x Monitoring and Troubleshooting Guide Viewing Statistics for RADIUS Clients SRC CLI Purpose Action Related Documentation View SNMP statistics for RADIUS clients user host gt show sae statistics radius SNMP Statistics Accounting ACKs from unrecognized IP 0 Authentication ACKs from unrecognized IP 0 Radius client ID SAE buffy Configuring the RADIUS Local IP Address and NAS ID C Web Interface Viewing SNMP Information for RADIUS Clients SRC CLI on page 144 Viewing SNMP Information for RADIUS Clients SRC CLI Purpose Action Related Documentation View SNMP information for RADIUS clients You can view information for all accounting or authentication clients or by IP address UDP port number or IP address and UDP port To view SNMP information for RADIUS accounting clients user host gt show sae statistics radius client accounting To view SNMP information for RADIUS authentication clients user host gt show sae statistics radius client authentication To view information for a particular RADIUS client by IP address user host gt
27. 2013 Juniper Networks Inc 127 SRC 4 6 x Monitoring and Troubleshooting Guide Related Documentation Policies ADSL Basic basicBod BestEffort64 block bod bodVpn both_fwr_filter both_fwr_fwd both_fwr_reject brickwall brickwall content provider content provider tiered custom_policer default default DHCP DocsisParameter DownStream dynsrcnat eglimit emai lweb emai lweb EntDefault filter More results available Display has reached the maximum number of results Number of skipped results 43 To restrict the number of displayed results user host gt show sae policies maximum results maximum results Enabling the Policy Configuration on the SRC CLI Viewing Information About Policies C Web Interface on page 151 e Viewing Information About SAE Licenses SRC CLI on page 126 e Viewing SNMP Information for Policies SRC CLI on page 143 Viewing Login Registrations SRC CLI 128 Purpose Action View information about registered logins You can view all login registrations or you can view a specific registration To view information about all login registrations user host gt show sae registered login To view a specific registration specify the media access control MAC address for the registration that you want to display user host gt show sae registered login mac address mac address To view only the MAC address of the registrations user host gt show sae registered login brief Cop
28. 8 Optional Specify the upper threshold for the critical alarm For example edit snmp monitor chassis alarm voltage 1 8v user host set over critical 2052 Related Configuring SNMP Chassis Alarms SRC CLI on page 70 Documentation SNMP Chassis Alarms on a C Series Controller on page 69 76 Copyright 2013 Juniper Networks Inc CHAPTER 10 Configuring the SNMP Traps SRC CLI SNMP Traps Overview on page 77 Configuration Statements for the SNMP Traps on page 79 Configuring Performance Traps SRC CLI on page 80 Configuring Event Traps SRC CLI on page 81 SNMP Traps Overview The SNMP agent provides network management systems with SNMP trap notifications in case of component failure or when critical resources are out of configurable limits This information is captured in a Management Information Base MIB The SNMP agent can be run on each SRC host It can monitor any SRC process running on the host and is preconfigured to monitor SRC processes Additionally it provides detailed monitoring and configuration of SRC server components MIBs The SNMP agent monitors MIB variables Most variables measure the performance of the system Some variables are counters such as the saeLogins variable which counts the total number of subscriber logins since startup Some variables are gauges and their numbers go up and down such as the saeHeapUsed variable which measures the Java Virtual Machine heap that is currently
29. Action Related Documentation View information about SAE interfaces We recommend that you do not enter the show sae interfaces command without specifying an interface virtual router brief or maximum results to filter the results Entering the show sae interfaces command can generate a large quantity of results and processing these results can place a load on the C Series Controller To view information about the router interfaces user host gt show sae interfaces To view information about particular router interfaces specify all or part of the interface name user host gt show sae interfaces interface name interface name To view information about interfaces for a particular virtual router specify all or part of the VR name user host gt show sae interfaces virtual router name virtual router name To view only the interface names user host gt show sae interfaces brief To restrict the number of displayed results user host gt show sae interfaces maximum results maximum results Initially Configuring the SAE Reloading Interface Classification Scripts SRC CLI Viewing Information About Interfaces C Web Interface on page 153 e Viewing Information About SAE Device Drivers SRC CLI on page 124 Viewing Information About SAE Licenses SRC CLI Purpose 126 View the installed licenses Copyright 2013 Juniper Networks Inc Chapter 15 Monitoring SAE Data SRC CLI Action user host gt show sa
30. Ctrl C 10 227 7 45 ping statistics 94 packets transmitted 94 received 0 packet loss time 93038ms rtt min avg max mdev 0 418 0 560 0 791 0 089 ms pipe 2 For information about all the options for the ping command see the SRC PE CLI Command Reference e Viewing the Route Information SRC CLI on page 204 e Viewing Routing Table Information SRC CLI on page 205 e Viewing Interface Information SRC CLI on page 205 Commands to Troubleshoot Connections to Remote Hosts Overview on page 203 Viewing the Route Information SRC CLI Purpose Action Related Documentation 204 You can use the traceroute command to get information about the hops between the local system and a remote host To view route information user host gt traceroute 192 2 7 48 traceroute to 192 2 7 48 192 2 7 48 30 hops max 46 byte packets 1 host 192 2 7 45 3000 716 ms H 3000 733 ms H 3001 272 ms H For information about all the options for the traceroute command see the SRC PE CLI Command Reference Viewing Routing Table Information SRC CLI on page 205 e Viewing Interface Information SRC CLI on page 205 e Testing Connectivity to Remote Hosts SRC CLI on page 203 Commands to Troubleshoot Connections to Remote Hosts Overview on page 203 Copyright 2013 Juniper Networks Inc Chapter 23 Troubleshooting Network Connectivity SRC CLI Viewing Routing Table Information SRC CLI Purpose You can display brief o
31. During the last Ps 60 R the number of resolution errors that occurred is D This L is the threshold of T errors A nicHostAvgReslvTime 231 S NIC Host During the last Ps 1000 500 250 60 R the average time this NIC Host spent on resolutions is Dms This L the threshold of Tms A Related Performance Traps on page 83 D mentation a al Trap Numbers in Performance Traps on page 84 Configuring Performance Traps SRC CLI on page 80 Copyright 2013 Juniper Networks Inc 9 SRC 4 6 x Monitoring and Troubleshooting Guide Router Driver Performance Traps Table 16 on page 92 lists the performance traps for router drivers Table 16 Performance Traps Router Drivers Alarm Threshold Levels default values Trap Event Text Displayed Critical Major EAE routerMsgErrors 190 S SAE Router Driver 10 5 1 60 R juniSaeRouterClientid During the last Ps D router errors occurred This L the threshold of T errors A routerMsgTimeouts 191 S SAE Router Driver 10 5 1 60 R juniSaeRouterClientid During the last Ps D router timeouts occurred This L the threshold of T timeouts A routerAvgJobQTime 192 S SAE Router Driver 500 250 100 60 R juniSaeRouterClientid During the last Ps the average time that incoming router messages waited to be processed is Dms This L the threshold of Tms A routerJobQLength 193 S SAE Router Driver 2500 500 100 60 AV juniSaeRouterClientld Th
32. Uses multiple deviceFilterKey configurations set device filter key router name erx440 amp interface name Fast Uses the not equal to condition Related Logging for SRC Components Overview on page 7 Documentation SNMP Traps Overview on page 77 Configuring an SRC Component to Store Log Messages in a File SRC CLI on page 26 Rotating Log Files Logrotate is a log file management utility that allows you to manage the large number of log files the SRC software generates Logrotate is essential for managing the disk space on the C Series Controller The following SRC components support the logrotate utility Third Generation Partnership Project 3GPP gateway SRC Admission Control Plug in ACP Activity Monitor SNMP agent 22 Copyright 2013 Juniper Networks Inc Chapter 2 Configuring Logging for SRC Components Web application server Command line interface CLI Diameter server Dynamic Service Activator IP Multimedia Subsystem IMS Juniper Policy Server JPS e License server Monitoring Agent application Network information collector NIC Service activation engine SAE Subscriber information collector SIC Session State Registrar SSR C Web interface You can use logrotate to regularly rotate log files by removing the oldest log files from your system and creating new log files You can rotate files based on size You can rotate log files daily w
33. Viewing Information About Boot Messages C Web Interface Purpose View messages generated during SRC software startup Action Click Monitor gt System gt Boot Messages The Boot Messages pane displays the boot messages Copyright 2013 Juniper Networks Inc 117 SRC 4 6 x Monitoring and Troubleshooting Guide ed in as admin About Refresh ACP System cu id Boot Messages ES Fri Mar 24 EST 2007 Date Feb 20 19 27 18 buffy genunix ID 936769 kern info dadO is pci 1 0 ide d daagz o Feb 20 19 27 18 buffy dada ID 365881 kern info lt ST380011A cyl 38307 alt 2 hd 16 sec 255 gt Feb 20 19 27 19 buffy swapgeneric ID 308332 kern info root on pci 1f 0 ide d disk 2 0 a fstype ufs Interface Feb 20 19 27 19 buffy peipsy ID 370704 kern info PCI device isaQ ebus0 Feb 20 19 27 19 buffy genunix ID 936769 kern info ebus0 is pci 1f 0 isa 7 gt id rer 20 19 27 19 buffy ebus ID 521012 kern info su0 at ebus0 offset 0 3f8 NIC J Feb 20 19 27 19 buffy genunix ID 936769 kern info su0 is pci 1lf 0 isa 7 serial 0 3f8 mP N Feb 20 19 27 19 buffy ebus ID 521012 kern info sul at ebus0 offset 0 2e8 Feb 20 19 27 19 buffy genunix ID 936769 kern info sul is pciG 1f 0 isa 7 serial 0 Ze8 TET Feb 20 19 27 19 buffy unix ID 987524 kern info cpu0 SUNVJ UltraSPARC IIe upaid O impl 0x13 ver 0x33 clock 548 MHz Feb 20 19 27 20 buffy peipsy ID 370704 kern info PCI device usb a ohcid Bonte Feb 20 19 27 20 buffy
34. colour VGA 80x25 Dentry cache hash table entries 2097152 order 12 16777216 bytes Inode cache hash table entries 1048576 order 11 8388608 bytes Placing software IO TLB between 0x28c1000 0x68c1000 Memory 8168568k 8912896k available 2106k kernel code Ok reserved 1297k data 196k init Calibrating delay using timer specific routine 6406 43 BogoMIPS 1pj 3203218 Security Scaffold v1 0 0 initialized SELinux Initializing SELinux Starting in permissive mode There is already a security framework initialized register_security failed selinux_register_security Registering secondary module capability Capability LSM initialized as secondary Mount cache hash table entries 256 order 0 4096 bytes CPU Trace cache 12K uops L1 D cache 16K CPU L2 cache 2048K using mwait in idle threads CPUO Initial APIC ID 0 Physical Processor ID 0 Using IO APIC NMI watchdog CPU Trace cache 12K uops L1 D cache 16K CPU L2 cache 2048K CPUO Initial APIC ID 0 Physical Processor ID 0 CPUO Intel R Xeon TM CPU 3 20GHz stepping 03 per CPU timeslice cutoff 705 82 usecs task migration cache decay timeout 1 msecs Booting processor 1 6 rip 6000 rsp 10006945f58 Initializing CPU 1 Calibrating delay using timer specific routine 6399 38 BogoMIPS 1pj 3199690 CPU Trace cache 12K uops L1 D cache 16K CPU L2 cache 2048K CPU1 Initial APIC ID 6 Physical Processor ID 3 Intel R Xeon TM CPU 3 20GHz stepping
35. detail w In the Policy Group box enter a full or partial policy name for which you want to display information or leave the box blank to display all policies In the Maximum Results box enter the maximum number of results that you want to In the Slot box enter the number of the slot for which you want to display policy information The Policies pane displays the status of the policies configured on the SAE Viewing SNMP Information for Policies SRC CLI on page 143 Viewing SNMP Statistics About Policies C Web Interface on page 168 View information about the device drivers available on the SAE Copyright 2013 Juniper Networks Inc Action Related Documentation Chapter 16 Monitoring SAE Data C Web Interface Click Monitor gt SAE gt Drivers The Drivers pane appears SAE Drivers Device Name Maximum Results Slot 0 style C E oR R O Inthe Device Name box enter a full or partial device driver name for which you want to display information or leave the box blank to display all devices For JunosE router drivers use the format lt virtual router name gt lt router name gt For device drivers running Junos OS and PCMM drivers use the format default lt router name gt Inthe Maximum Results box enter the maximum number of results that you want to receive Inthe Slot box enter the number of the slot for which you want to display device information Select
36. interfaces 3 Inthe Maximum Results box enter the maximum number of results that you want to receive 4 In the Slot box enter the number of the slot for which you want to display interface information 5 Select an output style from the Style list 6 Inthe Virtual Router box enter the name of the virtual router for which you want to display interfaces or leave the box blank to display information for all virtual routers 7 Click OK The Interfaces pane displays the interfaces available on the router Related Viewing Information About SAE Interfaces SRC CLI on page 126 D tati Dare External Interfaces on a C Series Controller Overview Viewing Equipment Registrations C Web Interface Purpose You can view all equipment registrations or you can view a specific registration Action To view information about equipment registrations 154 Copyright 2013 Juniper Networks Inc 1 Chapter 16 Monitoring SAE Data C Web Interface Click Monitor gt SAE gt Registered gt Equipment The Registered Equipment pane appears SAE Registered Equipment MAC address of equipment registrations Mac Address Value MAC address in the format xx xx xxixxixxixx Default No value Number of results to be displayed Maximum Results Legal range 1 INF Default 25 Display SAE information for a specified slot Slot Value Currently the chassis has only one slot The valid value is 0 Default 0 Output style Cho
37. show nic data slot All NIC data for a specified slot The output for this command includes the output for the show nic data agent and show nic data resolver commands Related gt Testing a NIC Resolution SRC CLI Documentation SRC CLI Commands to View Statistics About NIC Operations on page 175 Viewing Data for NIC Resolvers SRC CLI on page 180 Viewing Data for NIC Agents SRC CLI on page 182 Viewing Data for NIC Resolvers SRC CLI Purpose View all NIC resolver data To interpret the data for resolvers make sure that you have a good understanding of the NIC resolution process See NIC Resolution Process Overview 180 Copyright 2013 Juniper Networks Inc Chapter 17 Monitoring and Troubleshooting the NIC SRC CLI Action user host gt show nic data resolver Component name realms login C1 Key Type Vr String default dw2 Value Type SaeId String IOR 000000000000003549444C3A736D67742E6A756E697065722E6E65742F7361652F5365727 41637469766174696F6E456E67696E653A312E30000000000000000200000000000000780 0000000C31302E3232372E362E34330022610000000000226761726B6269742E6B616E6C6 6E70722E6E65742F736165504F412F5341450000000000020000000000000008000000004 000000010000001C000000000001000100000001050100010001010900000001050100010 0000002C0000000000000001000000010000001C000000000001000100000001050100010 0000000105010001 Key Type Vr String vr1495 marvin Value Type SaeId String Meanin
38. 156 Viewing Information About the Directory Blacklist C Web Interface Purpose View information about the directory blacklist configured on the SAE Action 1 Click Monitor gt SAE gt Directory Blacklist The Directory Blacklist pane appears Copyright 2013 Juniper Networks Inc 149 SRC 4 6 x Monitoring and Troubleshooting Guide Configure Diagnose Manage in as admin Refresh Preferences About Logout Directory Blacklist Display SAE information for a specified slot Slot Value Currently the chassis has only one slot The valid value is 0 Default 0 BR Reset Inc All Rights Reserved Trademark Notic CLIO PS 2 Inthe Slot box enter the number of the slot for which you want to display directory blacklist information The Directory Blacklist pane displays the directory blacklist information Related Removing the Directory Blacklist C Web Interface Documentation e Viewing Information About the Directory Blacklist SRC CLI on page 123 Viewing Information About Services C Web Interface Purpose View information about the services available on the SAE Action 1 Click Monitor gt SAE gt Services The Services pane appears SAE Services Number of results to be displayed z Maximum Results Legal range 1 INF D Default 25 Name of service Service Name Value All or part of the service name Default No value Display subscriber sessions and service sessions
39. 47 Viewing Subscriber Sessions SRC CLI Purpose View all subscriber sessions Action user host gt show sae subscribers Related Logging Out Simulated Subscribers SRC CLI on page 52 Documentation e Logging In Simulated Subscribers SRC CLI on page 48 Copyright 2013 Juniper Networks Inc 51 SRC 4 6 x Monitoring and Troubleshooting Guide Logging Out Simulated Subscribers SRC CLI You can view subscribers who are logged in and then log out subscribers who are accessible Logging Out Subscribers by DN on page 52 Logging Out Subscribers by IP Address on page 52 Logging Out Subscribers by Login Name on page 53 Logging Out Subscribers by Session ID on page 53 Logging Out Subscribers by DN To log out subscribers who are accessible by DN 1 Issue the show sae subscribers dn command to view the subscribers who are accessible by DN 2 Issue the request sae logout dn command to log out all subscribers who are accessible by DN 3 To log out specific subscribers use the filter option and specify all or part of the DN for the subscribers that you want to log out user host gt request sae logout dn filter filter 4 To specify that no confirmation is requested before the software logs out the subscribers use the force option user host gt request sae logout dn force user host gt request sae logout dn filter filter force Logging Out Subscribers by IP Address To log out subscribers who are acc
40. Absolute value is used for variables that are gauges and they transition from one alarm threshold level to the next SNMP Traps Overview on page 77 Trap Numbers in Performance Traps on page 84 e Configuring Performance Traps SRC CLI on page 80 Accounting Performance Traps on page 88 e Authentication Performance Traps on page 90 Trap Numbers in Performance Traps 84 Performance traps contain a trap ID a severity and an action The trap ID severity and action are encoded in the trap number to make it easy to configure trap receivers such as HP OpenView to color and highlight traps Every performance trap has four trap definitions one for critical major and minor severity levels and one for the clear action For critical major and minor severity levels the action is raise For the clear action there is no severity level because the severity level is implied by the last raise action for the trap ID Severity levels are assigned the following numbers e Critical 1 Major 2 Minor 3 Information 5 The JuniSdxTrapID TEXTUAL CONVENTION section in the Juniper SDX TC MIB lists the trap IDs for all traps The Juniper SDX TRAP MIB defines the SDX traps Copyright 2013 Juniper Networks Inc Related Documentation Chapter 11 Understanding Traps You can access the MIBs on the Juniper Web site at http www juniper net techpubs software management src e Performance Traps on page 83 Decoding
41. D tati ee Example SNMP Monitoring of Multiple MIB Objects on page 66 Configuration Statements for Customized SRC SNMP Monitors on page 59 SNMP Monitoring on C Series Controllers on page 57 Defining Events That Set Values for SNMP MIB Objects SRC CLI You can configure SNMP to set the value of a MIB object in response to an SNMP event D NOTE Do not define an event notification and an SNMP set for the same event To define an event that sets the value for a MIB variable in response to an SNMP event 1 From configuration mode access the configuration statements that configure an SNMP set for an event edit user host edit snmp monitor event event name snmp set 2 Specify the object identifier OID of the MIB variable to set edit snmp monitor event event name snmp set user host set oid OID 3 Specify the value for the object edit snmp monitor event event name snmp set user host set value value 4 Optional Specify whether the software monitors only the OID specified by the variable option If you do not set this option the index of the object triggering the alarm is appended to the variable to be set edit snmp monitor event event name snmp set user host set strict oid Copyright 2013 Juniper Networks Inc 65 SRC 4 6 x Monitoring and Troubleshooting Guide Related Configuring an SNMP Alarm on a C Series Controller SRC CLI on page 60 Documentation Example SNMP Monitoring of Multip
42. Devices Running Junos OS Viewing SNMP Information for the SAE Server Process SRC CLI on page 143 Viewing SNMP Statistics About RADIUS C Web Interface Purpose View SNMP statistics about RADIUS Action 1 Click Monitor gt SAE gt Statistics gt RADIUS The Statistics RADIUS pane appears SAE Statistics RADIUS Display SAE information for a specified slot p Slot Value Currently the chassis has only one slot The valid value is 0 D Default 0 ok res w 2 Inthe Slot box enter the number of the slot for which you want to display SNMP statistics for RADIUS 3 Click OK The Statistics RADIUS pane displays statistics for RADIUS Related Configuring SAE Properties for Global Default SNMP Communities for Use with JunosE Documentation Routers and Devices Running Junos OS e Viewing SNMP Statistics About RADIUS Clients C Web Interface on page 170 Viewing SNMP Statistics About RADIUS Clients C Web Interface Purpose View SNMP statistics about RADIUS clients 170 Copyright 2013 Juniper Networks Inc Chapter 16 Monitoring SAE Data C Web Interface Action 1 Click Monitor gt SAE gt Statistics gt RADIUS gt Client The Statistics RADIUS Client pane appears SAE Statistics RADIUS Client Display SNMP information for either RADIUS accounting clients or RADIUS authentication clients D Client Choices Type authentication fl accounting Display RADIUS accounting client informat
43. Inc security certificates information viewing C Web interface nic sees ieee 118 SRG Chlina 113 server processes SNMP information viewing C Web INtErfACO eescstestestesessessesteseesesseeteseesees 169 service sessions SNMP information viewing C Web INterface ccececccsesssessssessesssseesesseeseseens 173 services viewing on SAE C Web INtErfaCO hn eeecscessestesessessesteseesesesteseesees 150 SRE GUI ica oad res relaterer vette ennen dass 129 simulated router driver configuring C Web INTErfACC eececcessestssessessestestsseesessesseseeseeseesessees 45 SRC CLI simulated subscribers logging in on SAB es cicisssicsccssscestutesacsienteuecetencneieauatainees 48 laine OUl asenaan 47 SNMP agent MIB Sre RNE 78 See also SNMP traps ssssssssssrissserserirerrresrressrrerrrrerrrenrn 83 viewing information on SAE C Web interface 163 164 165 166 167 168 169 170 T71 172 173 SRE CIR esena treme sere 139 SNMP alarm BOOlGANMES Eei nen a hen 61 discontinuity Ch CK ss ssessesesssrrserrisrrssrrrssrrrsrrresrresrnre 63 EXISTENCE LOS tieira 62 OVEIVIQW vsscsssessssesessssesscsesscsesesscsesusassnssesesuesesesesansessesnsesaess 60 threshold eS te cess ceili lk ae ceca 63 SNMP chassis alarms battery voltage SENSOFrS u sssesererserrsrrrrsrerrrrrrrrr rer configUring cesses CPU core voltage sensors CPU DIMM voltage SENSOSS ccssssssssessescseeseseseseees GPU SENSO Seina er re aa CPU temperature SCNSOSS ccccc
44. Internet access environment We assume that readers know how to use the routers directories and RADIUS servers that they will deploy in their SRC networks If you are using the SRC software in a cable network environment we assume that you are familiar with the PacketCable Multimedia Specification PCMM as defined by Cable Television Laboratories Inc CableLabs and with the Data over Cable Service Interface Specifications DOCSIS 1 1 protocol We also assume that you are familiar with operating a multiple service operator MSO multimedia managed IP network Documentation Conventions Table 1 on page xvi defines the notice icons used in this guide Table 2 on page xvi defines text conventions used throughout this documentation Copyright 2013 Juniper Networks Inc xv SRC 4 6 x Monitoring and Troubleshooting Guide Table 1 Notice Icons Icon Meaning Informational note Description Indicates important features or instructions Caution Indicates a situation that might result in loss of data or hardware damage Warning Alerts you to the risk of personal injury or death Laser warning A A s Alerts you to the risk of personal injury from a laser Table 2 Text Conventions Convention Bold text like this Rilke e Represents keywords scripts and tools in text e Represents a GUI element that the user selects clicks checks or clears Examples summa e Specify the keyword
45. MIB in RFC 2981 Event MIB October 2000 Copyright 2013 Juniper Networks Inc Chapter 8 Creating Custom SNMP Monitors Configuration Statements for Customized SRC SNMP Monitors Use the following configuration statements to configure the SNMP custom monitoring at the edit hierarchy level snmp monitor f security name security name i snmp monitor alarm namef interval interval sample type absolute value delta value ignore startup alarm event event variable variable strict oid snmp monitor alarm name boolean test comparison equal unequal less less or equal greater greater or equal value value snmp monitor alarm name existence test type present absent changed snmp monitor alarm name threshold test rising threshold rising threshold falling threshold falling threshold snmp monitor alarm name delta discontinuity check variable variable snmp monitor event namenotification oid oid strict object strict object wildcarded object wildcarded object snmp monitor event name snmp set variable variable value value strict oid For detailed information about each configuration statement see the SRC PE CLI Command Reference Related Documentation Configuring an SNMP Alarm on a C Series Controller SRC CLI on page 60 Example SNMP Monitoring of Multiple MIB Objects on page 66 Configuring an SNMPV3 Security Name for SNMP Mo
46. NIC process user host gt show nic statistics process Component Statistics Component Name process Heap in use 456194 bytes 87 Heap limit 524288 bytes Threads 42 Up time 747848 seconds since Wed Jan 31 19 35 57 EST 2007 Table 28 on page 176 describes the output fields for the show nic statistics process command Output fields are listed in the order in which they appear Table 28 Output Fields for show nic statistics process Field Name Field Description Component name Name of component process indicates the NIC process Heap in use Heap size allocated by the Java Virtual Machine The percentage indicates the percentage of the heap in use We recommend that if the percent in use is more than 90 additional heap be allocated for the NIC Heap limit Size of Java heap configured for the NIC Threads Number of threads in use Up time Length of time NIC has been running on the system Includes the date and time at which NIC was last started Configuring the NIC SRC CLI Viewing Host Process Statistics C Web Interface on page 186 e Viewing Statistics for a NIC Host SRC CLI on page 177 e Viewing Statistics for NIC Resolvers SRC CLI on page 177 Viewing Statistics for NIC Agents SRC CLI on page 179 Copyright 2013 Juniper Networks Inc Chapter 17 Monitoring and Troubleshooting the NIC SRC CLI Viewing Statistics for a NIC Host SRC CLI Purpose View statistics for a NIC host A
47. Peers C Web Interface on page 195 e Viewing Statistics for NTP C Web Interface on page 196 e Viewing NTP Status C Web Interface on page 196 Copyright 2013 Juniper Networks Inc 193 SRC 4 6 x Monitoring and Troubleshooting Guide 194 Copyright 2013 Juniper Networks Inc CHAPTER 20 Monitoring NTP C Web Interface e Viewing NTP Peers C Web Interface on page 195 e Viewing Statistics for NTP C Web Interface on page 196 e Viewing NTP Status C Web Interface on page 196 Viewing NTP Peers C Web Interface Purpose View alist of NTP peers Action 1 Click Monitor gt NTP gt Associations The Associations pane appears NTP Associations Component Date No Resolve Suppress symbolic addressing Disk Iptables JPS NIC Redirect Server 17 Juniper Networks Inc All Rights Reserved Trademark Notice Privacy Juniper aa 2 To suppress symbolic addressing select the No Resolve box 3 Click OK The Associations pane displays the list of NTP peers Configure Diagnose Manage Logged in as admin Refresh Preferences About Logout Related Configuring an NTP Peer for a C Series Controller C Web Interface Documentation Viewing NTP Peers SRC CLI on page 191 Viewing Statistics for NTP C Web Interface on page 196 Viewing NTP Status C Web Interface on page 196 Copyright 2013 Juniper Networks Inc 195 SRC 4 6 x Monitoring and Troubleshooting Guide Viewing Statisti
48. Redirector Performance Traps on page 95 SRC ACP Performance Traps on page 95 JPS Performance Traps on page 96 Configuration Statements for the SNMP Traps Use the following configuration statements to configure the SNMP traps and the notification target at the edit hierarchy level snmp notify alarm category category name snmp notify alarm category category name alarm alarm name interval interval critical critical major major minor minor 3 snmp notify event category category name snmp notify event category category name event event name snmp notify target target name f Copyright O 2013 Juniper Networks Inc 79 SRC 4 6 x Monitoring and Troubleshooting Guide address port community type trapv1 trapv2 inform 3 For detailed information about each configuration statement see the SRC PE CLI Command Reference Related Configuring Performance Traps SRC CLI on page 80 D tati ocumentanon Configuring Event Traps SRC CLI on page 81 SNMP Traps Overview on page 77 Configuring Performance Traps SRC CLI Use the following configuration statements to configure performance traps snmp notify alarm category category name snmp notify alarm category category name alarm alarm name interval interval critical critical major major minor minor To configure performance traps 1 From configuration mode access the configuration statement that configures the type of perform
49. SimRouterDriver info error debug debug_9 Slave info error debug SlaveMgr info error debug SolicitedReplyFactory error debug debug_9 SROMsg warning debug SSFile info error debug SSFiles info error debug debug_6 SspAccRadiusPeerMI info error SspAuthRadiusPeerMI info error SspSM info error debug SsrAttributePluginHelper error debug SsrEventHandler info error debug SSREventJob error SsrReaderPluginEventListener error debug SSRServiceEventJob info error debug Copyright 2013 Juniper Networks Inc Table 3 SAE Categories and Severity Levels continued Category SSRSubscriberEventJob Chapter 2 Configuring Logging for SRC Components Severity Level info error debug SsrWriterPluginEventListener info error debug StateSynchronizer info error debug Stats info error debug StoreConfig info error debug StoreOplterator debug debug_8 SubscriberRef info error debug SubscriberScheduleLdapListener error debug SubscriberScheduleManager debug SubscriptionParser error Table debug TestMaster info error debug TestPromo debug TimeoutSessionJobManager info error debug TimePolicyManager info error debug Transaction error debug debug_9 TransactionManager debug debug_9 UCCImpl error debug UnsolicitedMessa
50. Thresholds SRE CUN aisa arent cava aca ite qin T Seon aie sae Aenea 63 Defining a Discontinuity Check to Validate Delta Values SRC CLI 63 Configuring an SNMPv3 Security Name for SNMP Monitoring SRC CLI 64 Defining Events for Which SNMP Sends Notifications SRC CLI 64 Defining Events That Set Values for SNMP MIB Objects SRC CLI 65 Example SNMP Monitoring of Multiple MIB Objects 00 200 ee 66 Copyright 2013 Juniper Networks Inc Table of Contents Chapter 9 Configuring SNMP Chassis AlarmMS 00ceeeece eee eeeeeeeees 69 SNMP Chassis Alarms on aC Series Controller 0 0 0 00 cece eee 69 Configuring SNMP Chassis Alarms SRC CLI 0 0 000 eee ee eee 70 Defining Alarm Thresholds for Battery Voltage Sensors 70 Defining Alarm Thresholds for CPU Sensors 1 eee 71 Defining Alarm Thresholds for CPU Core Voltage Sensors 71 Defining Alarm Thresholds for CPU DIMM Voltage Sensors 72 Defining Alarm Thresholds for CPU Temperature Sensors 73 Defining Alarm Thresholds for Fan Speed Sensors 0000 cee eee eee 73 Defining Alarm Thresholds for System Temperature Sensors 74 Defining Alarm Thresholds for Voltage Sensors 00000 e eee eee 75 Chapter 10 Configuring the SNMP Traps SRC CLI 0c cece eee eee eens 77 SNMP Traps Overview 0 0 0 0 eee eee eee tenes T MBS
51. Trap Numbers for Raised Trap Actions on page 85 Decoding Trap Numbers for Clear Trap Actions on page 85 Decoding Trap Numbers for Raised Trap Actions Related Documentation To decode a trap number for raised trap actions Use the following equation Trap number Trap ID 10 severity For example if the trap number is 43 then the trap ID is 4 saeServiceActivations and the severity is 3 MINOR Therefore a trap number of 43 means that a MINOR event has occurred for the saeServiceActivations trap Decoding Trap Numbers for Clear Trap Actions on page 85 Configuring Performance Traps SRC CLI on page 80 Trap Numbers in Performance Traps on page 84 e Performance Traps on page 83 Decoding Trap Numbers for Clear Trap Actions Related Documentation To decode a trap number for clear trap actions Use the following equation Trap number Trap ID 10 For example if the trap number is 250 then the trap ID is 25 saeAccPendingRequests Therefore a trap number of 250 means that the saeAccPendingRequests alarm has been cleared Decoding Trap Numbers for Raised Trap Actions on page 85 e Configuring Performance Traps SRC CLI on page 80 e Trap Numbers in Performance Traps on page 84 e Performance Traps on page 83 Copyright 2013 Juniper Networks Inc 85 SRC 4 6 x Monitoring and Troubleshooting Guide SRC Performance Traps The following SRC performance trap tables are available SA
52. Traps on page 83 D mentation Poe Trap Numbers in Performance Traps on page 84 Configuring Performance Traps SRC CLI on page 80 System Management Performance Traps Table 17 on page 94 lists the performance traps for system management event Table 17 Performance Traps System Management Event Alarm Threshold Levels default values Trap Event Text Displayed Critical Major Interval sec R AV agentLdapLimitReached 113 S Ldap The Ldap Limithasbeen 100 95 90 30 AV reached D entries during the of MAX of of last Ps This L the threshold of MAX MAX T entries A Related Performance Traps on page 83 D mentation ocumentato Trap Numbers in Performance Traps on page 84 Configuring Performance Traps SRC CLI on page 80 Policy Engine Performance Traps Table 18 on page 94 lists the performance traps for policy engine Table 18 Performance Traps Policy Engine Alarm Threshold Levels default values Trap Event Text Displayed Critical Major i Interval sec penAvgPGModProcTime 150 S Policy Engine The average 200 500 1000 60 AV policy group modification processing time is D ms This L the threshold of T ms A penAvgICMModProcTime 151 S Policy Engine The average 200 500 1000 60 AV interface classifier modification processing time is D ms This L the threshold of T ms A pdpErrors 152 S Policy Decision Point During 10 5 1 30 R the last Ps D errors occurred This L
53. Tue Number subscriber sessions restored in background 0 Feb 13 14 18 49 EST 2007 Feb 13 14 18 49 EST 2007 Number of provisioning objects left to collect 0 Total number of provisioning objects to collect 11 Start time Tue Feb 13 14 18 45 EST 2007 End time Tue Feb 13 14 18 47 EST 2007 Number of synched contexts 7 Number of post sync jobs 6 Session Store Info Session Store Status sessionsCol lected Status Last Update Time Mon Jul 29 10 26 26 UTC 2013 Current Usage Ratio 1 0 124 Copyright 2013 Juniper Networks Inc Related Documentation Last Modified Time Size KB Name Mon Jul 29 10 27 05 UTC 2013 117 9 Chapter 15 Monitoring SAE Data SRC CLI LiveSessionsSize KB storeOps_1_1 117 9 To view information about the state of a particular device driver specify all or part of the virtual router name For device drivers running Junos OS and PCMM drivers use the format default routerName user host gt show sae drivers device name device name To view only the virtual router names for the device driver user host gt show sae drivers brief Router Drivers Router Name default simJunos Router Type junos To restrict the number of displayed results user host gt show sae drivers maximum results maximum results Initially Configuring the SAE Shutting Down the Device Drivers SRC CLI e Viewing Information About Device Drivers C Web Interface on page 152 e Viewing Statistics for Device Drivers
54. Viewing SNMP Statistics for Licenses by Device C Web Interface on page 166 Documentati BED ald Viewing SNMP Statistics for Local Licenses C Web Interface on page 167 Viewing SNMP Information for Local Licenses SRC CLI on page 142 Viewing SNMP Information for Client Licenses SRC CLI on page 141 Viewing SNMP Information for Licenses on Virtual Routers SRC CLI on page 142 Viewing SNMP Statistics for Licenses by Device C Web Interface Purpose View SNMP statistics for licenses by device 166 Copyright 2013 Juniper Networks Inc Chapter 16 Monitoring SAE Data C Web Interface Action 1 Click Monitor gt SAE gt Statistics gt License gt Device The Statistics License Device pane appears SAE Statistics License Device Name of a device Value All or part of the device name e For JUNOSe router drivers use the format Device virtualRouterName routerName Name e For JUNOS router drivers and PCMM drivers use the format default routerName Default No value Display SAE information for a specified slot Slot Value Currently the chassis has only one slot The valid value is 0 Default 0 Output style Choices Style brief Display only device names Default Detail EX Reset j 2 Inthe Device Name box enter a full or partial device name for which you want to display information or leave the box blank to display SNMP statistics for all devices For JunosE router drivers use the fo
55. XV Documentation Feedback 0 se eee eee xvii Requesting Technical Support asuna anaana eee xvii Self Help Online Tools and ResourceS 1 eee xviii Opening a Case With JTAC 1 ee eee xviii Monitoring and Troubleshooting the SRC Software and C Series Controllers Overview of Monitoring and Troubleshooting ToolS 000eeeeees 3 Monitoring and Troubleshooting Tools OvervieW 0 cee eee 3 Using Logging for the SRC Software and C Series Controllers Configuring Logging for SRC ComponentS 0cce eee cece e eens 7 Logging for SRC Components OvervieW ee eens 7 Categories and Severity Levels for Event Messages 0 0 00 eee 7 Defining Categories 0 eee eee teen eens 8 Defining Severity LevelS 0 eee teen eee 18 Defining Filters ccs daca don e dad oe israr dea taehncaone A eR 19 Enabling Network Device Specific Filtering for SAE Debug Logs SRC CoD R R ea rE shee neem ah EEN es aos eee ee ss er pias eet dedi 20 Rotating Log File 0 eee re EE 22 Configuration OVErvieW 6 ee eee teens 23 Configuring Logging for SRC Components with the CLI 25 Configuration Statements for SRC Component Logging 25 Configuring an SRC Component to Store Log Messages ina File SRC CLI 26 Configuring System Logging SRC CLI 0 6 ee eens 28 Configuration Statements for the Logrotate Utility SRC CLI 30 Configuring the Logrotate Utility SRC CLI
56. all log files that match the wildcard pattern are rotated before the pre rotate script is run and only if at least one log is to be rotated These directives may appear only inside a log file definition The entire pattern is passed to the script as the first argument If the script exits with an error no further processing is performed last action last action Optional The lines between last action and endscript both of which must appear on lines by themselves are executed using bin sh once after all log files that match the wildcard pattern are rotated after the post rotate script is run and only if at least one log is rotated These directives may appear only inside a log file definition The entire pattern is passed to the script as the first argument If the script exits with an error only an error message is shown because this is the last action Use the options described in Table 9 on page 34 under the edit system logrotate logrotate conf create edit system logrotate logrotate conf logfiles name create and edit system logrotate file name logfiles name create hierarchy levels to specify the permissions owner and group of new log files The default is to use the same mode owner and group as the original file Table 9 Options for Specifying How Log Files are Created Option Description default Create new log files with the same mode owner and group as the original file mode mode Create ne
57. appears Diagnose NIC Data Agent D Maximum Results Name LF Slot a E FE OG 2 Inthe Maximum Results box enter the maximum number of results that you want to receive 3 Inthe Name box enter the name of the agent for which you want to view data 4 Inthe Slot box enter the number of the slot for which you want to display agent data 5 Click OK The Data Agent pane displays the properties for the agent Related Configuring a NIC Scenario C Web Interface Documentation Viewing Data for NIC Agents SRC CLI on page 182 e Viewing Agent Statistics C Web Interface on page 189 Viewing Statistics for NIC Agents SRC CLI on page 179 Viewing Agent Statistics C Web Interface Purpose View statistics for an agent Copyright 2013 Juniper Networks Inc 189 SRC 4 6 x Monitoring and Troubleshooting Guide Action 1 Click Monitor gt NIC gt Statistics gt Agent The Statistics Agent pane appears NIC Statistics Agent D Name Slot 0 ox Reset OU 2 Inthe Name box enter the name of the agent for which you want to view statistics 3 In the Slot box enter the number of the slot for which you want to display agent statistics 4 Click OK The Statistics Agent pane displays the properties for the agent Related Configuring a NIC Scenario C Web Interface Documentation e Viewing Data for NIC Agents SRC CLI on page 182 e Viewing Agents C Web Interface on page 188 e View
58. as well as system performance The agent can send data to SNMP network management systems SNMP trap notification to SNMP management systems SRC CLI to monitor specified SRC components and C Series Controllers C Web interface to monitor specified SRC components and C Series Controllers The SRC software also includes various sample and test clients for the dynamic service activator the SAE remote interface and the SAE plug in interface Related Logging for SRC Components Overview on page 7 Documentation Monitoring with the SRC CLI and the C Web Interface on page 105 SRC Monitoring Options on page 105 SNMP Traps Overview on page 77 Copyright O 2013 Juniper Networks Inc 3 SRC 4 6 x Monitoring and Troubleshooting Guide 4 Copyright O 2013 Juniper Networks Inc PART 2 Using Logging for the SRC Software and C Series Controllers Configuring Logging for SRC Components on page 7 Configuring Logging for SRC Components with the CLI on page 25 Configuring Logging for SRC Components C Web Interface on page 37 Copyright 2013 Juniper Networks Inc SRC 4 6 x Monitoring and Troubleshooting Guide 6 Copyright 2013 Juniper Networks Inc CHAPTER 2 Configuring Logging for SRC Components Logging for SRC Components Overview on page 7 e Categories and Severity Levels for Event Messages on page 7 Rotating Log Files on page 22 Logging for SRC Components Overview Related Documentation
59. box type a name for the new logger and click OK The name of the logger appears in the side pane and the Logger pane Expand the logger in the side pane and then click File or Syslog Click Create enter information as described in the Help text in the main pane and click Apply Configuring an SRC Component to Store Log Messages in a File SRC CLI on page 26 Configuring the SAE to Store Log Messages in a File C Web Interface on page 38 Configuring NIC to Store Log Messages in a File C Web Interface on page 38 Configuring SRC ACP C Web Interface SRC ACP Overview Configuring the SAE to Store Log Messages in a File C Web Interface To configure component logging for SAE 1 Related Documentation Click Configure expand Shared expand ACP and then click Configuration The Configuration pane appears From the Create new list select Logger The name of the logger appears in the side pane and the Logger pane Expand the logger in the side pane and then click File or Syslog Click Create enter information as described in the Help text in the main pane and click Apply Configuring an SRC Component to Store Log Messages in a File SRC CLI on page 26 Configuring ACP to Store Log Messages in a File C Web Interface on page 37 Configuring NIC to Store Log Messages in a File C Web Interface on page 38 Configuring the SNMP to Store Log Messages in a File C Web Interface on page 39 Configuring JPS to Store Log Mess
60. component You can enable network device specific filtering of SAE debug logs only if you set the SAE severity level to debug and then include the device filter key option under the shared sae configuration logger hierarchy level After you configure the device filter key option restart the SAE for the configuration to take effect 4 Specify the absolute path of the filename that contains the current log files edit shared sae configuration logger sae file log 1 file user host set filename filename Make sure that the user Under which the J2EE application server or Web application server runs has write access to this folder If this user does not have write access to the default folder configure the component or application to write logs in folders to which the user has write access 5 Optional Specify the absolute path of the filename that contains the log history edit shared sae configuration logger sae file log 1 file user host set rollover filename rollover filename When the log file reaches the maximum size the software closes the log file and renames it If a previous rollover file exists the software overwrites it The software then reopens the log file and continues to save event messages in it NOTE OnaC Series Controller log files are rotated according to the settings in the logrotate utility The logrotate utility specifies how often log files are rotated and whether they are compressed Copyright
61. connections 0 Number of open requests 0 Server address 0 0 0 0 Server port 3333 Time since last redirect 0 Configuring the Session Store Feature SRC CLI e Viewing Information About SAE Device Drivers SRC CLI on page 124 e Viewing SNMP Information for Routers and Devices SRC CLI on page 144 e Viewing Statistics for Device Drivers SRC CLI on page 145 Viewing Statistics for Subscriber and Service Sessions SRC CLI Purpose Action Related Documentation View SNMP statistics for subscriber and service sessions user host gt show sae statistics sessions SNMP Statistics Current service sessions Current user sessions Logins includes sync and static IP portal logins Logouts Service session idle timeouts Service sessions started Service sessions stopped Service session timeouts DO GOGODOGO Configuring Access to Subscriber Data SRC CLI Configuring Access to Service Data SRC CLI Viewing Information About Subscriber Sessions by DN SRC CLI on page 133 e Viewing Information About Subscriber Sessions by Service Name SRC CLI on page 136 e Viewing Information About Subscriber Sessions by Session ID SRC CLI on page 137 Monitoring Statistics for Subscriber and Service Sessions SRC CLI on page 148 Copyright 2013 Juniper Networks Inc 147 SRC 4 6 x Monitoring and Troubleshooting Guide Monitoring Statistics for Subscriber and Service Sessions SRC CLI Purpose Display real time SNM
62. custom monitors Alarms Define an alarm condition and an event to generate in response to the alarm An alarm identifies the object to be monitored the frequency with which the monitor retrieves a sample value for the object and a condition that triggers an event Events Define the type of action SNMP set or notification to be taken in response to an alarm condition If you do not define an event for an alarm SNMP sends the notifications based on the monitor type Copyright 2013 Juniper Networks Inc 57 SRC 4 6 x Monitoring and Troubleshooting Guide 58 Related Documentation The SRC software supports the following types of alarm conditions for monitors Boolean test Compares a sample value with a specified value or range of values Existence test Monitors when an object appears disappears or changes value Threshold test Monitors when an object s value rises above or falls below specified values A monitor supports only one type of alarm condition or test at a time Each alarm can use one of the following sampling methods Absolute value Uses the actual value of the object Existence tests support only absolute values Delta value Uses the difference between two sample values By using the delta value sampling method you can configure SNMP to detect a discontinuity in values to prevent false alarms caused by the value of a MIB object being reset At the end of a polling interval bef
63. debug QosProfileTrackingEntry info error debug Copyright 2013 Juniper Networks Inc 13 SRC 4 6 x Monitoring and Troubleshooting Guide Table 3 SAE Categories and Severity Levels continued Category Extension Severity Level QTPEventListener info error debug QTPJobQueue error QTPThreadPoolThread error debug RadiusAuthPluginEventListener info error debug RadiusPacket error debug RadiusPeer info error debug debug 9 RadiusPeerGroup info error debug RadiusPluginEventListener info error debug RadiusSocket info error debug debug 9 RadiusTrackingPluginEventListener info error debug ReadyToSyncJob error debug 9 RefCounter error ReferencedPrecedenceProcessor error debug 9 ReferencedProcessor error debug RemotePlugin info error debug ReplayJob error debug Replicator info error debug debug_9 Retailer error debug RetailerLdapListener error debug RksEventListener info error debug RksPluginPublisher error debug RouteConfigPPRMsg warning error debug RouterComponent info error RouterLDAPListener debug 14 Copyright 2013 Juniper Networks Inc Table 3 SAE Categories and Severity Levels continued Chapter 2 Configuring Logging for SRC Components Category Severity Level RouterRegistry info error debug RouterScript
64. dn filter filter secret To view only the subscriber session information without service sessions user host gt show sae subscribers dn brief user host gt show sae subscribers dn filter filter brief Copyright 2013 Juniper Networks Inc 133 SRC 4 6 x Monitoring and Troubleshooting Guide Related Documentation To view the subscriber session ID login name and IP address user host gt show sae subscribers dn terse user host gt show sae subscribers dn filter filter terse To restrict the number of displayed results user host gt show sae subscribers dn maximum results maximum results user host gt show sae subscribers dn filter f77ter maximum results maximum results Configuring Access to Subscriber Data SRC CLI e Viewing General Information About Subscriber Sessions SRC CLI on page 133 Viewing Information About Subscriber Sessions by IP Address VPN Identifier or both SRC CLI on page 134 e Viewing Information About Subscriber Sessions by Service Name SRC CLI on page 136 Viewing Information About Subscriber Sessions by Session ID SRC CLI on page 137 e Viewing Information About Subscriber Sessions by Accounting User Identifier SRC CLI on page 137 Viewing Information About Subscriber Sessions by IP Address VPN Identifier or both SRC CLI 134 Purpose Action View information about subscriber sessions by the IP address VPN identifier or both associated with the subscriber session
65. for hidden services Secret o Default Disabled Display SAE information for a specified slot Slot Value Currently the chassis has only one slot The valid value is 0 Default 0 Output style Choices SE H brief Display only service names Default Detail ox Reset 0 2 Inthe Maximum Results box enter the maximum number of results that you want to receive 3 Inthe Service Name box enter a full or partial service name for which you want to display information or leave the box blank to display all services 4 Select the Secret check box to set a flag indicating that secret services are displayed 150 Copyright 2013 Juniper Networks Inc Chapter 16 Monitoring SAE Data C Web Interface 5 In the Slot box enter the number of the slot for which you want to display services information 6 Select an output style from the Style list 7 Click OK The Services pane displays the status of the services running on the SAE Related Viewing Information About Services SRC CLI on page 129 Documentation Viewing Information About Licenses C Web Interface Purpose View information about licenses Action 1 Click Monitor gt SAE gt Licenses The Licenses pane appears SAE Licenses Display SAE information for a specified slot Slot Value Currently the chassis has only one slot The valid value is 0 D Default 0 Hi Ee OG 2 Inthe Slot box enter the number of the slot for which you w
66. genunix ID 936769 kern info ohci0 is pci lf 0 usb a SAE lg Feb 20 19 27 22 buffy gld ID 944156 kern info dmfe0 Davicom DM910Z ivl l type ether mac address 00 03 ba ce d7 79 oa N Feb 20 19 27 22 buffy pcipsy ID 370704 kern info PCI device ethernet c dmfe0 Feb 20 19 27 22 buffy genunix ID 936769 kern info dmfeO is pci 1f 0 ethernet c Feb 20 19 27 22 buffy gld ID 944156 kern info dmfel Davicom DM9102 vl 1 type ether mac address 00 03 ba ce d 7a Feb 20 19 27 22 buffy peipsy ID 370704 kern info PCI device ethernet 5 dmfel Feb 20 19 27 22 buffy genunix ID 936769 kern info dmfel is pci lf 0 ethernet 5 Feb 20 19 27 23 buffy genunix ID 454863 kern info dump on dev dsk cOt2d0sl size 2000 MB Feb 20 19 27 24 buffy dmfe ID 426309 kern info dmfeO PHY 1 link up 100 Mbps Full Duplex Feb 20 19 27 24 buffy dmfe ID 247303 kern notice NOTICE dmfel PHY 1 link dom Feb 20 19 27 25 buffy pseudo ID 129642 kern info pseudo device devinfo0 Feb 20 19 27 25 buffy genunix ID 936769 kern info devinfo0 is pseudo devinfoa0 Feb 20 19 27 26 buffy scsi ID 193665 kern info sd0 at uata0 target 3 lun 0 Feb 20 19 27 26 buffy genunix ID 936769 kern info sd0 is pci 1f 0 ide d sd 3 0 Feb 20 19 27 26 buffy ebus ID 521012 kern info isadma0 at ebus0 offset 0 0 Feb 20 19 27 26 buffy pseudo ID 129642 kern info pseudo device fssnap0 Feb 20 19 27 26 buffy genunix ID 936769 kern info fssnap0 is pseudo fssnap 0 Fe
67. global and local options for the logrotate utility You set global options under the edit system logrotate logrotate conf hierarchy level You set local options for specific logging configuration files such as the var log wtmp file under the edit system logrotate logrotate conf logfiles name hierarchy level You specify log rotation for system and SRC components under the edit system logrotate file name logfiles hierarchy levels Copyright 2013 Juniper Networks Inc 31 SRC 4 6 x Monitoring and Troubleshooting Guide Table 8 Logrotate Options Option Description compress Optional Compress old versions of log files in gzip format delay compress Optional Postpone compression of the previous log file until the next rotation cycle This option takes effect only when used in conjunction with the compress option Use this option when a program cannot be instructed to close its log file and as a result may continue writing to the previous log file indefinitely copy Optional Make a copy of the log file but do not modify the original log file Use this option to make a snapshot of the current log file or when some other utility needs to truncate or parse the file When you use this option the create option has no effect because the original log file stays in place daily Optional Rotate log files every day weekly Optional Rotate log files weekly This option rotates log files if the current
68. in use A MIB defines a trap type that is associated with many MIB variables For traps based on counters the SNMP agent periodically polls each specified variable It takes the difference between the previous and current values of the variable and compares that difference with the threshold If the difference has moved up across thresholds the SNMP agent sends a trap raising an alarm minor major or critical for the highest threshold crossed to all configured receivers If the difference has moved down across thresholds the agent sends a trap clearing the alarm of the lowest threshold crossed You can configure the polling interval between samples If you change the polling interval also adjust the thresholds For instance if the critical threshold for SAE logins is 1 000 and the interval is 60 seconds then a critical alarm is raised if there are more than 1 000 logins in 60 seconds But if you change the interval to 600 seconds then you would need to change the threshold to 10 000 to have the same meaning Copyright 2013 Juniper Networks Inc 77 SRC 4 6 x Monitoring and Troubleshooting Guide Traps 78 For traps based on gauges the previous value is not needed the current value is compared with the thresholds In the trap tables there is a field named R AV where R means rate and AV means absolute value Rate is used for variables that are counters and it measures the rate of change of the counter Absolute value is us
69. info error debug RouterScriptComponent error SAEAccess Impl debug SAE AUDIT info notice warning SchedulingAuthPlugin info error debug ScriptServiceSession info error debug ServiceActivator info error debug ServiceAuthEvent debug ServiceFragment debug Service_LDAPDataManager info error debug ServiceLDAPDataManagerConnectionThread info error debug ServiceLdapListener error debug ServiceManager error debug ServiceMutexGroup error ServiceMutexGroupLdapListener info error debug ServiceMutexGroupManager debug ServiceProfile error ServiceProfileLdapListener error debug ServiceSchedule error ServiceScheduleLdapListener info error debug ServiceScheduleManager debug ServiceScopeLdapListener info error debug ServiceSession info error debug Copyright 2013 Juniper Networks Inc SRC 4 6 x Monitoring and Troubleshooting Guide Table 3 SAE Categories and Severity Levels continued Category Extension Severity Level ServiceSessionAttributes debug ServiceVrLdapListener info error debug SessionAudit notice SessionFactory info error debug SessionJob error SessionJobManager info error debug SessionStoreFactory info error debug SessionStorelmpl info error debug SimRouter info warning error debug
70. juniper net cm To verify service entitlement by product serial number use our Serial Number Entitlement SNE Tool https tools juniper net SerialNumberEntitlementSearch Opening a Case with JTAC You can open a case with JTAC on the Web or by telephone Use the Case Management tool in the CSC at http www juniper net cm Call 1 888 314 JTAC 1 888 314 5822 toll free in the USA Canada and Mexico For international or direct dial options in countries without toll free numbers see http www juniper net support requesting support html xviii Copyright 2013 Juniper Networks Inc PART 1 Monitoring and Troubleshooting the SRC Software and C Series Controllers Overview of Monitoring and Troubleshooting Tools on page 3 Copyright 2013 Juniper Networks Inc SRC 4 6 x Monitoring and Troubleshooting Guide 2 Copyright O 2013 Juniper Networks Inc CHAPTER 1 Overview of Monitoring and Troubleshooting Tools Monitoring and Troubleshooting Tools Overview on page 3 Monitoring and Troubleshooting Tools Overview The SRC software provides the following tools to help you monitor and troubleshoot your SRC environment Logging support for SRC components System log server on C Series Controllers NIC test commands to troubleshoot NIC configuration Router simulation to facilitate application testing Subscriber simulation to facilitate application testing SNMP agent to monitor SRC components
71. name e show sae subscribers session id show sae threads Security Security certificate configuration and statistics e show security certificate System SRC software and C Series Controller e show configuration configuration data e show system boot messages e show system information e show system ldap community e show system ldap server show system ldap statistics e show system users Related Monitoring and Troubleshooting Tools Overview on page 3 D mentation eee MEN FANO Monitoring with the SRC CLI and the C Web Interface on page 105 108 Copyright 2013 Juniper Networks Inc CHAPTER 13 Monitoring the System SRC CLI Viewing Information About a C Series Controller SRC CLI on page 109 Viewing Information About Components Installed SRC CLI on page 111 e Viewing Information About Boot Messages SRC CLI on page 111 Viewing Information About Security Certificates SRC CLI on page 113 Viewing Information About a C Series Controller SRC CLI Purpose View information about a C Series Controller Copyright 2013 Juniper Networks Inc 109 SRC 4 6 x Monitoring and Troubleshooting Guide 110 Action Related Documentation user host gt show system information System Identification Hostname my server Manufacturer Juniper Networks Product Name C 2000 Version 1 0 Serial Number 0207082006000001 UUID 48384441 5254 0030 4859 0030485977EE Hostid e30a2e07 Software version
72. name hierarchy level You can also configure log rotation for system and SRC components under the edit system logrotate file name logfiles hierarchy level Copyright 2013 Juniper Networks Inc 23 SRC 4 6 x Monitoring and Troubleshooting Guide 24 Related Documentation Logging for SRC Components Overview on page 7 Configuring an SRC Component to Store Log Messages in a File SRC CLI on page 26 Configuration Statements for the Logrotate Utility SRC CLI on page 30 Configuring the Logrotate Utility SRC CLI on page 31 Copyright 2013 Juniper Networks Inc CHAPTER 3 Configuring Logging for SRC Components with the CLI Configuration Statements for SRC Component Logging on page 25 Configuring an SRC Component to Store Log Messages in a File SRC CLI on page 26 Configuring System Logging SRC CLI on page 28 Configuration Statements for the Logrotate Utility SRC CLI on page 30 Configuring the Logrotate Utility SRC CLI on page 31 Configuration Statements for SRC Component Logging Use the following configuration statements to configure logging for SRC components You access these statements from the hierarchy for a component such as edit shared acp configuration edit shared sae configuration edit shared nic scenario scenario name edit snmp agent edit slot O jps logger name f file logger device filter key device filter key filter filter filename filename roll
73. output style from the Style list 7 Click OK Copyright 2013 Juniper Networks Inc Related Documentation Chapter 16 Monitoring SAE Data C Web Interface The Subscribers DN pane displays information about subscriber sessions Configuring Access to Subscriber Data SRC CLI Viewing Information About Subscriber Sessions by IP Address C Web Interface on page 159 Viewing Information About Subscriber Sessions by Login Name C Web Interface on page 160 Viewing Information About Subscriber Sessions by Service Name C Web Interface on page 161 Viewing Information About Subscriber Sessions by Session ID C Web Interface on page 162 Viewing Information About Subscriber Sessions by IP Address C Web Interface Purpose View information about subscriber sessions by IP address Action 1 Click Monitor gt SAE gt Subscribers gt IP The Subscribers IP pane appears Configure Diagnose Manage Logged in as admin Refresh Preferences About Logout Subscribers IP IP address of subscriber sessions IP Address Value All or part of the subscriber IP address Default No value Number of results to be displayed Maximum Results Legal range 1 INF Default 25 Display subscriber sessions and service sessions for hidden services Ski o Default Disabled Display SAE information for a specified slot Slot Value Currently the chassis has only one slot The valid value is 0 Default 0 Output
74. renare ra ET a E A TE EE aea e T Configuration MIBS 2 ap hr ne ark drer are ae rand nd deres 78 WOS aree anea E e E E ET A E Ea aa E a TE reed 78 SNMP Traps and Informs 0 0 0 00 cee eee eae 79 Configuration Statements for the SNMP TrapS 0 000 ee eee eee 79 Configuring Performance Traps SRC CLI 0 0 0 ee 80 Configuring Event Traps SRC CEDAR of 6 02020eee40 vee wane eed ad ead sn 81 Chapter 11 Understanding TAPS siose EDER Eee eN REE 83 Performance Traps rer rare end has EDR NERE se SNEDE es es 83 NS Sears ey aaah ENE ceo E bao BOA eye ae 84 Trap Numbers in Performance TrapS 0 cee eee eee eee 84 Decoding Trap Numbers for Raised Trap ActionS 0 0 0 0 ccc ee eee 85 Decoding Trap Numbers for Clear Trap ACtionS 1 0 0 0 00 cece eee nee 85 SRC Performance TrapS 00 cc eee ee eens 86 SAE Performance TrapSis sinss evan sees Ca ea DRE KR eae ee eee EES 86 Accounting Performance TrapS 0 0 ccc eee ee eee 88 Authentication Performance TrapS 0 0 0 ce eee 90 NIC Performance TBS 22 cad arrar Gua ean a Gacae Bee e a wane aS 91 Router Driver Performance TrapS usss nanara eee eee 92 System Management Performance TrapS 0 ccc eee ee 94 Policy Engine Performance Traps 0 00 c eee eee 94 SRC Redirector Performance TrapS 0 0 ccc eee 95 SRC ACP Performance TrapS 2 eee eee 95 IPS Performance IraPS iaviasdcotaw cae poeSeecieaades a eGas EAS 96 Chassis Perfo
75. resolvers Copyright 2013 Juniper Networks Inc 187 SRC 4 6 x Monitoring and Troubleshooting Guide Action 1 Click Monitor gt NIC gt Statistics gt Resolver The Statistics Resolver pane appears Component Date Disk Interfaces 17 Juniper Networks Inc AllRights Reserved Trademark Notice Privacy Configure Diagnose Manage Logged in as admin Refresh Preferences About Logout NIC Statistics Resolver Name E FE i N SETI 8 CHEE 2 Inthe Name box enter the name of the resolver for which you want to view statistics 3 Inthe Slot box enter the number of the slot for which you want to display resolver statistics 4 Click OK The Statistics Resolver pane displays the statistics for the resolver Related Configuring the NIC C Web Interface Documentation e Viewing Resolvers C Web Interface on page 186 e Viewing Statistics for NIC Resolvers SRC CLI on page 177 Viewing Data for NIC Resolvers SRC CLI on page 180 Viewing Agents C Web Interface You can view agent properties or agent statistics with the C Web interface by e Viewing Agents C Web Interface on page 188 e Viewing Agent Statistics C Web Interface on page 189 Viewing Agents C Web Interface Purpose View information about an agent 188 Copyright 2013 Juniper Networks Inc Chapter 18 Monitoring the NIC C Web Interface Action 1 Click Monitor gt NIC gt Data gt Agent The Data Agent pane
76. results user host gt show sae subscribers session id maximum results maximum results user host gt show sae subscribers session id filter filter maximum results maximum results Configuring Access to Subscriber Data SRC CLI Viewing General Information About Subscriber Sessions SRC CLI on page 133 e Viewing Information About Subscriber Sessions by DN SRC CLI on page 133 e Viewing Information About Subscriber Sessions by IP Address VPN Identifier or both SRC CLI on page 134 e Viewing Information About Subscriber Sessions by Service Name SRC CLI on page 136 e Viewing Information About Subscriber Sessions by Accounting User Identifier SRC CLI on page 137 Viewing Information About Subscriber Sessions by Accounting User Identifier SRC CLI Purpose Action View information about subscriber sessions by the accounting user identifier associated with the subscriber session You can view all or specific information about all associated subscriber sessions To view information about subscriber sessions accessible by accounting user identifier user host gt show sae subscribers accounting user id Copyright 2013 Juniper Networks Inc 137 SRC 4 6 x Monitoring and Troubleshooting Guide Related Documentation To view information about particular subscriber sessions specify all or part of the accounting user identifier user host gt show sae subscribers accounting user id filter filter To view the subscri
77. show sae statistics radius client ip address 7p address user host gt show sae statistics radius client accounting ip address jp address user host gt show sae statistics radius client authentication ip address ip address To view information for a particular RADIUS client by UDP port number user host gt show sae statistics radius client udp port udp port user host gt show sae statistics radius client accounting udp port udp port user host gt show sae statistics radius client authentication Udp port udp port To view only the RADIUS clients that were accessible by IP address and port number user host gt show sae statistics radius client brief user Ghost gt show sae statistics radius client accounting brief user host gt show sae statistics radius client authentication brief Configuring the RADIUS Local IP Address and NAS ID C Web Interface e Viewing Statistics for RADIUS Clients SRC CLI on page 144 Viewing SNMP Information for Routers and Devices SRC CLI Purpose 144 View SNMP information for routers and devices that the SAE manages You can view information for all routers and devices or for specific ones Copyright 2013 Juniper Networks Inc Chapter 15 Monitoring SAE Data SRC CLI Action To view SNMP information for routers and devices that the SAE is managing user host gt show sae statistics device To view information for a particular router specify all or part of the VR name For device drivers runn
78. the SRC CLI and the C Web Interface Monitoring with the SRC CLI and the C Web Interface on page 105 SRC Monitoring Options on page 105 Monitoring with the SRC CLI and the C Web Interface You can use the show commands available with the SRC CLI to monitor the operation and configuration of your SRC environment The C Web graphical user interface GUI allows you to monitor the operation and configuration of your SRC environment by using a Web browser with Hypertext Transfer Protocol HTTP or HTTP over Secure Sockets Layer HTTPS enabled Related Monitoring and Troubleshooting Tools Overview on page 3 D mentation PEDERS N SRC Monitoring Options on page 105 SRC Monitoring Options Table 25 on page 106 lists and compares the monitoring options for the C Web interface and the SRC CLI Copyright 2013 Juniper Networks Inc 105 SRC 4 6 x Monitoring and Troubleshooting Guide Table 25 Comparison of SRC Monitoring Options C Web Interface Monitor Option Information Displayed Corresponding SRC CLI Commands ACP Admission Control Plug In ACP data and e show acp backbone congestion point statistics congestion point expression e show acp backbone congestion point dn e show acp backbone service e show acp edge congestion point dn e show acp edge congestion point subscriber session id show acp edge subscriber e show acp remote update congestion point dn show acp remote update congestion point name
79. triggered and a trap is sent to the list of configured receivers Copyright 2013 Juniper Networks Inc Chapter 10 Configuring the SNMP Traps SRC CLI Event traps Traps that are sent when an event occurs for example when a connection is established or closed SNMP Traps and Informs Related Documentation SNMP notifications can be sent as traps or inform requests SNMP traps are unconfirmed notifications SNMP informs are confirmed notifications SNMP traps are defined in either standard or enterprise specific MIBs The standard and enterprise specific traps are compiled into the network management software With traps the receiver does not send any acknowledgment when it receives a trap and the sender cannot determine if the trap was received To increase reliability SNMP informs are supported in SNMPv3 With an inform the receiver acknowledges the message with a response For information about configuring SNMP notification handling For information on system logging severity levels for SNMP traps see Categories and Severity Levels for Event Messages on page 7 Configuring the SRC SNMP Agent SRC CLI SAE Performance Traps on page 86 Accounting Performance Traps on page 88 Authentication Performance Traps on page 90 NIC Performance Traps on page 91 Router Driver Performance Traps on page 92 e System Management Performance Traps on page 94 e Policy Engine Performance Traps on page 94 SRC
80. used to validate the delta or difference between values Typically the marker object is of the TimeTicks DateAndTime or Timestamp type To define a discontinuity check 1 Configure an SNMP alarm with the sample type set to delta value Copyright 2013 Juniper Networks Inc 63 SRC 4 6 x Monitoring and Troubleshooting Guide See Configuring an SNMP Alarm on a C Series Controller SRC CLI on page 60 2 From configuration mode access the configuration statements that configures a discontinuity check For example for an alarm named ifErrorsDelta edit user host edit snmp monitor alarm ifErrorsDelta delta discontinuity check 3 Specify the name or object identifier OID of the discontinuity marker For example edit snmp monitor alarm sequence check ifErrorsDelta delta discontinuity check user host set variable ifTable ifEntry ifLastChange Related Defining Events That Set Values for SNMP MIB Objects SRC CLI on page 65 Documentation Example SNMP Monitoring of Multiple MIB Objects on page 66 Configuration Statements for Customized SRC SNMP Monitors on page 59 SNMP Monitoring on C Series Controllers on page 57 Configuring an SNMPv3 Security Name for SNMP Monitoring SRC CLI To configure an SNMPv3 security name to access a monitored MIB object 1 From configuration mode access the configuration statements that configure SNMP monitoring edit user host edit snmp monitor 2 Specify an SNMPv3
81. 0 0 175 Table 28 Output Fields for show nic statistics process 176 Table 29 Output Fields for show nic statisticstest 177 Table 30 Output Fields for show nic statistics resolver 178 Table 31 Output Fields for show nic statistics agent 179 Table 32 Commands to Display NIC DataTable 23 Commands to Display NIC DAIL G23 22 sa pect nae Ete aA ae Seen Gone eee ae ee aah SETS Shea ETO ES 180 Table 33 Output Fields for show nic data resolver 2 0 0 0 eee eee 181 Table 34 Output Fields for show nic dataagent 0 00 cee eee 183 Monitoring NTP SRC CLI 2 ais icc ce cers crac sedate edna ee owas a 191 Table 35 Output Fields for show ntp associations command 19 Copyright 2013 Juniper Networks Inc About the Documentation SRC Documentation and Release Notes on page xv Audience on page xv Documentation Conventions on page xv Documentation Feedback on page xvii Requesting Technical Support on page xvii SRC Documentation and Release Notes Audience For a list of related SRC documentation see http www juniper net techpubs If the information in the latest SRC Release Notes differs from the information in the SRC guides follow the SRC Release Notes This documentation is intended for experienced system and network specialists working with routers running Junos OS and JunosE software in an
82. 0 Metric 1 RX packets 482467 errors 0 dropped 0 overruns 0 frame 0 TX packets 57573 errors 0 dropped 0 overruns 0 carrier 0 collisions 0 txqueuelen 100 RX bytes 38147790 36 3 MiB TX bytes 4396018 4 1 MiB Base address 0xcc00 Memory fc9c0000 fc9e0000 eth1 Link encap Ethernet HWaddr 00 30 48 55 B6 FD BROADCAST MULTICAST MTU 1500 Metric 1 RX packets 0 errors 0 dropped 0 overruns 0 frame 0 TX packets 0 errors 0 dropped 0 overruns 0 carrier 0 collisions 0 txqueuelen 1000 Copyright 2013 Juniper Networks Inc 205 SRC 4 6 x Monitoring and Troubleshooting Guide 206 Related Documentation lo lo si RX bytes 0 0 0 b TX bytes 0 0 0 b Base address 0xc800 Memory fc9a0000 fc9c0000 Link encap Local Loopback inet addr 127 0 0 1 Mask 255 0 0 0 inet6 addr 1 128 Scope Host UP LOOPBACK RUNNING MTU 16436 Metric 1 RX packets 1946394 errors 0 dropped 0 overruns 0 frame 0 TX packets 1946394 errors 0 dropped 0 overruns 0 carrier 0 collisions 0 txqueuelen 0 RX bytes 260604464 248 5 MiB TX bytes 260604464 248 5 MiB 1 Link encap Local Loopback inet addr 192 168 254 1 Mask 255 255 255 0 UP LOOPBACK RUNNING MTU 16436 Metric 1 to Link encap IPv6 in IPv4 NOARP MTU 1480 Metric 1 RX packets 0 errors 0 dropped 0 overruns 0 frame 0 TX packets 0 errors 0 dropped 0 overruns 0 carrier 0 collisions 0 txqueuelen 0 RX bytes 0 0 0 b TX bytes 0 0 0 b Viewing Information About System Interfaces C Web Interface on page 208 Viewing t
83. 03 Booting processor 2 1 rip 6000 rsp 1000697df58 Initializing CPU 2 Calibrating delay using timer specific routine 6399 32 BogoMIPS 1pj 3199664 CPU Trace cache 12K uops L1 D cache 16K CPU L2 cache 2048K For information about configuring C Series Controllers see the SRC PE C Web Interface Configuration Guide Related Viewing Information About Boot Messages C Web Interface on page 117 Documentation Viewing Information About a C Series Controller SRC CLI on page 109 e Viewing Information About Components Installed SRC CLI on page 111 e Viewing Information About System Disk Status C Web Interface on page 119 Viewing Information About Security Certificates SRC CLI Purpose View information about security certificates that reside on the system Copyright 2013 Juniper Networks Inc 113 SRC 4 6 x Monitoring and Troubleshooting Guide Action user host gt show security certificate web subject CN myhost CAcertl subject CN myhost Meaning If no security certificates reside on the system the CLI return a message to that effect user host gt show security certificate No entity certificates in key store For information about managing security digital certificates see Digital Certificates Overview Related Viewing Information About Security Certificates C Web Interface on page 118 Documentation 114 Copyright 2013 Juniper Networks Inc CHAPTER 14 Monitoring the System C Web Interface V
84. 156 Viewing Information About Subscriber Sessions SRC CLI 132 You can list subscriber sessions by Viewing General Information About Subscriber Sessions SRC CLI on page 133 e Viewing Information About Subscriber Sessions by DN SRC CLI on page 133 Viewing Information About Subscriber Sessions by IP Address VPN Identifier or both SRC CLI on page 134 e Viewing Information About Subscriber Sessions by Login Name SRC CLI on page 135 e Viewing Information About Subscriber Sessions by Service Name SRC CLI on page 136 Viewing Information About Subscriber Sessions by Session ID SRC CLI on page 137 Viewing Information About Subscriber Sessions by Accounting User Identifier SRC CLI on page 137 Viewing the Number of Active Service Sessions SRC CLI on page 138 e Viewing Subscriber Session Count Used by a Managed Router SRC CLI on page 139 Copyright 2013 Juniper Networks Inc Chapter 15 Monitoring SAE Data SRC CLI Viewing General Information About Subscriber Sessions SRC CLI Purpose Action Related Documentation View general information about subscriber sessions You can view all or restricted information about all subscriber sessions To view information about all subscriber sessions user host gt show sae subscribers To view the subscriptions and service sessions from hidden services user host gt show sae subscribers secret To view only the subscriber session information wit
85. 165 Viewing SNMP Information for Local Licenses SRC CLI on page 142 e Viewing SNMP Information for Client Licenses SRC CLI on page 141 Viewing SNMP Information for Policies SRC CLI Purpose Action Related Documentation View SNMP information for the policy engine policy decision point and the shared object repository where the policy objects are stored user host gt show sae statistics policy management SNMP Statistics Policy Management Type Policy Engine Data Total number of policy group modifications 0 Total number of interface classifier modifications 0 Average time for processing policy group modification 0 Average time for processing interface classifier modification 0 Policy Management Type PDP Data Total number of default policy decisions 45 Total number of service policy decisions 0 Total number of errors 0 Policy Management Type Repository Data Current total number of policy groups loaded 1 Configuring SAE Properties for Global Default SNMP Communities for Use with JunosE Routers and Devices Running Junos OS e Viewing Information About Policies C Web Interface on page 151 e Viewing SNMP Statistics About Policies C Web Interface on page 168 Viewing SNMP Information for the SAE Server Process SRC CLI Purpose Action Related Documentation View SNMP information for the SAE server process user host gt show sae statistics process SNMP Statistics Heap in use 19211 kilo bytes
86. 2 e Viewing NTP Peers C Web Interface on page 195 Viewing Statistics for NTP SRC CLI Purpose Action Related Documentation View statistics for NTP with the SRC CLI user host gt show ntp statistics time since restart 2371617 time since reset 2371617 packets received 38765 packets processed 2573 current version 38761 previous version 0 bad version 0 access denied 36188 bad length or format 0 bad authentication 0 rate exceeded 0 Configuring NTP on a C Series Controller e Viewing NTP Peers SRC CLI on page 191 e Viewing Statistics for NTP C Web Interface on page 196 e Viewing NTP Status C Web Interface on page 196 Viewing Internal Variables for NTP SRC CLI 192 Purpose Action Related Documentation View information about internal variables for NTP with the SRC CLI user host gt showntp status system peer menemsha jnpr net system peer mode client leap indicator 00 stratum 4 precision 20 root distance 0 02245 s root dispersion 0 07689 s reference ID 10 227 2 100 reference time 922b152 86dd0529 Thu Dec 7 2006 10 27 14 526 system flags auth monitor ntp kernel stats jitter 0 000183 s stability 1 728 ppm broadcastdelay 0 003998 s authdelay 0 000000 s Viewing NTP Peers SRC CLI on page 191 e Viewing Statistics for NTP SRC CLI on page 192 Copyright 2013 Juniper Networks Inc Chapter 19 Monitoring NTP SRC CLI e Viewing NTP
87. 32 Viewing Information About Subscriber Sessions SRC CLI 132 Viewing General Information About Subscriber Sessions SRC CLI 133 Viewing Information About Subscriber Sessions by DN SRC CLI 133 Viewing Information About Subscriber Sessions by IP Address VPN Identifier OF DONS RG Gu isis er rene Geese Sees tok we oes oo See 134 Viewing Information About Subscriber Sessions by Login Name SRC CU ae ate dine a eee niet Reading Akos oa Bea dey aera Gee ae aia 135 Viewing Information About Subscriber Sessions by Service Name SRC GL eis cry cuss es crc osteo aces eur ae ects Gd neat yeh ciety eens re 136 Viewing Information About Subscriber Sessions by Session ID SRC CLI 137 Viewing Information About Subscriber Sessions by Accounting User Identifier CSG cece otc creme Pace cutn ee ane cin tea ele ege 137 Viewing the Number of Active Service Sessions SRC CLI 138 Viewing Subscriber Session Count Used by a Managed Router SRC GD aoa cere ago ce Ge a seg ERE eset sie A Tae SE 139 Copyright 2013 Juniper Networks Inc Table of Contents Viewing SAE SNMP Information with the CLI 000000008 139 Viewing Statistics About the Directory SRC CLI 00005 140 Viewing Statistics for Directory Connections SRC CLI 140 Viewing SNMP Information for Client Licenses SRC CLI 141 Viewing SNMP Information for Local Licenses SRC CLI
88. 6 running redir Release 7 0 Build REDIR A 7 0 0 0176 disabled licSvr Release 7 0 Build LICSVR A 7 0 0 0179 stopped nic Release 7 0 Build GATEWAY A 7 0 0 0170 disabled sae Release 7 0 Build SAE A 7 0 0 0166 running www Release 7 0 Build UMC A 7 0 0 0169 disabled jps Release 7 0 Build JPS A 7 0 0 0172 disabled agent Release 7 0 Build SYSMAN A 7 0 0 0174 running webadm Release 7 0 Build WEBADM A 7 0 0 0173 disabled Meaning Table 26 on page 111 describes the output fields for the show component command Output fields are listed in the order in which they appear Table 26 Output Fields for show component Field Name Field Description Name Name of the component Version Version of the component Status State of the component running or disabled Related Viewing Information About Components Installed C Web Interface on page 117 Documentation e Viewing C Series Controller Information Directories on the C Series Controller Viewing Information About Boot Messages SRC CLI Purpose If you encounter system problems ina C Series Controller after you start the system you can view information about the boot process View messages generated during system boot Copyright 2013 Juniper Networks Inc 11 SRC 4 6 x Monitoring and Troubleshooting Guide 112 Action user host gt show system boot messages Bootdata ok command line is ro root dev vg0 root console tty0 console ttyS0 96 00 Linux version 2 6
89. 9 42 0 3 ELsmp bui ldcentos x8664 build centos org gcc versi on 3 4 6 20060404 Red Hat 3 4 6 3 1 SMP Fri Oct 6 06 28 26 CDT 2006 BIOS provided physical RAM map BIOS e820 0000000000000000 000000000009ac00 usable BIOS e820 000000000009ac00 00000000000a0000 reserved BIOS e820 00000000000ea070 0000000000100000 reserved BIOS e820 0000000000100000 00000000dffc0000 usable BIOS e820 00000000dffc0000 00000000dffcf000 ACPI data BIOS e820 00000000dffcf000 00000000dfff0000 ACPI NYS BIOS e820 00000000dfff0000 00000000e0000000 reserved BIOS e820 00000000fec00000 00000000fec86000 reserved BIOS e820 00000000fee00000 00000000fee01000 reserved BIOS e820 00000000ffb00000 0000000100000000 reserved BIOS e820 0000000100000000 0000000220000000 usable ACPI RSDP v000 ACPIAM 0x00000000000f7760 ACPI RSDT v001 AM I OEMRSDT 0x03000529 MSFT 0x00000097 0x00000000dffc000 0 ACPI FADT v002 AM I OEMFACP 0x03000529 MSFT 0x00000097 0x00000000dffc020 0 ACPI MADT v001 AM I OEMAPIC 0x03000529 MSFT 0x00000097 0x00000000dffc039 0 ACPI OEMB v001 AM I AMI OEM 0x03000529 MSFT 0x00000097 0x00000000dffcf04 0 ACPI DSDT v001 DVLG2 DVLG2007 0x00000007 INTL 0x02002026 0x000000000000000 0 No NUMA configuration found Faking a node at 0000000000000000 0000000220000000 Bootmem setup node 0 0000000000000000 0000000220000000 No mptable found On node 0 totalpages 2228224 DMA zone 4096 pages LIFO batch 1 No
90. ATION System hardware failure is found with juniSdxOperatingSensor on system juniSdxOperatingLocation RAISE When the trap is cleared the text displayed is e INFORMATION System hardware failure with juniSdxOperatingSensor on system juniSdxOperatingLocation is cleared CLEAR diskFailure 301 When the trap is raised the text displayed is e INFORMATION System disk failure is found RAISE When the trap is cleared text displayed is e INFORMATION System disk failure is cleared CLEAR Copyright 2013 Juniper Networks Inc 99 SRC 4 6 x Monitoring and Troubleshooting Guide Related SNMP Traps Overview on page 77 Documentation Configuring Event Traps SRC CLI on page 81 Alarm State Transitions on page 100 Alarm State Transitions Table 24 on page 100 lists the alarm state transitions Table 24 Alarm State Transitions Last Data Current Data Threshold Threshold Action s NONE NONE No action NONE MINOR Raise minor event NONE MAJOR Raise major event NONE CRITICAL Raise critical event MINOR NONE Clear minor event MINOR MINOR No action MINOR MAJOR Raise major event MINOR CRITICAL Raise critical event MAJOR NONE Clear critical event MAJOR MINOR Clear major event Raise minor event MAJOR MAJOR No action MAJOR CRITICAL Raise critical event CRITICAL NONE Clear critical event CRITICAL MINOR Clear critical event Raise minor event CRITICAL MAJOR Clear c
91. About Logout SAE Statistics Sessions Component Display SAE information for a specified slot Date Slot Value Currently the chassis has only one slot The valid value is 0 Disk Default 0 Interfaces o Reset Iptables Juniper rks In ghts ed Trademark Notice Privacy Juniper a Net 2 Inthe Slot box enter the number of the slot for which you want to display SNMP statistics for specific devices 3 Click OK The Statistics Sessions pane displays statistics for subscriber sessions and service sessions Related Configuring SAE Properties for Global Default SNMP Communities for Use with JunosE Documentation Routers and Devices Running Junos OS Viewing SNMP Statistics for Devices C Web Interface on page 171 Viewing SNMP Statistics for Specific Devices C Web Interface on page 172 174 Copyright 2013 Juniper Networks Inc CHAPTER 17 Monitoring and Troubleshooting the NIC SRE CLI SRC CLI Commands to View Statistics About NIC Operations on page 175 e Viewing Statistics for the NIC Process SRC CLI on page 176 e Viewing Statistics for a NIC Host SRC CLI on page 177 e Viewing Statistics for NIC Resolvers SRC CLI on page 177 e Viewing Statistics for NIC Agents SRC CLI on page 179 SRC CLI Commands to View NIC Resolution Data on page 180 e Viewing Data for NIC Resolvers SRC CLI on page 180 e Viewing Data for NIC Agents SRC CLI on page 182 Troubleshooting NIC Data Resolution SRC C
92. C Series Controllers on page 57 Defining an Alarm to Monitor the Status of an Object SRC CLI 62 Related Documentation You can configure a monitor to identify when a MIB object appears disappears or changes value If the test criteria are met the test is considered to be successful Before you define an alarm type configure the associated SNMP alarm See Configuring an SNMP Alarm on aC Series Controller SRC CLI on page 60 To configure an alarm to monitor the status of an object Specify the type of alarm present absent or changed For example for an alarm named existence alarm edit snmp monitor alarm existence alarm existence test user host set type present Defining an Alarm for an SNMP Monitor That Compares Object Values SRC CLI on page 61 Defining an Alarm for an SNMP Monitor That Compares Values Against Thresholds SRC CLI on page 63 Configuring an SNMP Alarm ona C Series Controller SRC CLI on page 60 Configuration Statements for Customized SRC SNMP Monitors on page 59 SNMP Monitoring on C Series Controllers on page 57 Copyright 2013 Juniper Networks Inc Chapter 8 Creating Custom SNMP Monitors Defining an Alarm for an SNMP Monitor That Compares Values Against Thresholds SRC CLI Related Documentation You can configure a monitor to Compare a sample value for a MIB object to a threshold encountered as the value rises and a threshold encountered as the value falls
93. C component edit user host edit system logrotate file name For example to specify local options for the ACP component edit user host edit system logrotate UMCacp Specify the name of one or more log files for which you want to configure compression and rotation options Separate log filenames with a space edit system logrotate UMCacp user host edit logfiles name For example to specify the UMCacp 1 log file edit system logrotate UMCacp user host edit logfiles UMCacp 1 Specify how you want to rotate and compress the log files by setting the desired options listed in Table 8 on page 32 For example to rotate log files weekly edit system logrotate UMCacp logfiles UMCacp 1 user host set weekly Specify how you want to create new log files by setting the options listed in Table 9 on page 34 For example to use the default setting edit system logrotate UMCacp logfiles UMCacp 1 user host edit create user host set default Logging for SRC Components Overview on page 7 Rotating Log Files on page 22 Configuration Statements for the Logrotate Utility SRC CLI on page 30 Copyright 2013 Juniper Networks Inc CHAPTER 4 Configuring Logging for SRC Components C Web Interface Before You Configure Logging for SRC Components on page 37 Configuring ACP to Store Log Messages in a File C Web Interface on page 37 Configuring the SAE to Store Log Messages in a File C Web Interface on page 38
94. CLI on page 80 Chassis Performance Traps Table 22 on page 97 lists the performance traps for chassis events 96 Copyright 2013 Juniper Networks Inc Chapter 11 Understanding Traps Table 22 Performance Traps Chassis Trap Event diskUsage 302 Alarm Threshold Levels default values Interval Text Displayed Critical Major sec S diskUsage directory 95 of 90 80 60 AV juniSdxDiskPath uses up MAX of of to MAX MAX juniSdxDiskUsedPercentage of disk space This exceeded THRESHOLD RAISE Related Performance Traps on page 83 Documentation Trap Numbers in Performance Traps on page 84 Configuring Performance Traps SRC CLI on page 80 Event Traps Table 23 on page 97 lists the event traps Table 23 Event Traps Trap Event Text Displayed saeLicenseNetworkCapacity 9 S SAE The total number of sum weighted line cards allocated in this SRC network is LINE CARD NUMBER THRESHOLD_PERCENTAGE This L the network ERX capacity threshold of T sum weighted line cards A saeServiceSessionLicense 1 S LICENSE SERVER SERVICE_SESSIONS SERVICES_PERCENTAGE of the available licensed service sessions are in use A routerConnClosed 211 When juniSaeRouterUseFailOver is FALSE INFORMATION SAE Router Driver The router connection to juniSaeRouterClientld has been closed RAISE When juniSaeRouterUseFailOver is TRUE e INFORMATION SAE Router Driver The router con
95. Can view user accounts admin control Can modify user accounts Interfaces clear p Can clear learned network information configure L can enter configuration mode field Special for field debug support firewall Can view firewall configuration firewall control Can modify firewall configuration interface Can view interface configuration interface control Can modify interface configuration maintenance Can perform system maintenance as wheel network Can access the network reset Can reset and restart interfaces and processes routing Can view routing configuration routing control Can modify routing configuration secret Can view secret configuration secret control Can modify secret configuration security Can view security configuration security control Can modify security configuration shell Can start a local shell snmp Can view SNMP configuration snmp control Can modify SNMP configuration system Can view system configuration system control Can modify system configuration view Can view current values and statistics service Can view service definitions service control Can modify service definitions subscriber Can view subscriber profiles subscriber control Can modify subscriber profiles Individual command authorization Allow regular expression none Deny regular expression none Related Viewing Information About the SRC CLI C Web Interface on page 121 Documentat
96. E Performance Traps on page 86 Accounting Performance Traps on page 88 Authentication Performance Traps on page 90 NIC Performance Traps on page 91 Router Driver Performance Traps on page 92 System Management Performance Traps on page 94 Policy Engine Performance Traps on page 94 SRC Redirector Performance Traps on page 95 SRC ACP Performance Traps on page 95 JPS Performance Traps on page 96 Chassis Performance Traps on page 96 SAE Performance Traps Table 12 on page 86 lists the performance traps for the SAE Table 12 Performance Traps SAE Alarm Threshold Levels default values Interval Trap Event Text Displayed Critical Major sec saeHeapUsed 1 S SAE D of 95 90 80 60 AV Java VM heap is in use This L the threshold of T A saeLogins 2 S SAE During 2000 1000 400 60 R the last Ps D logins occurred This L the threshold of T logins A saeLogouts 3 S SAE During 2000 1000 400 60 R the last Ps D logouts occurred This L the threshold of T logouts A 86 Copyright 2013 Juniper Networks Inc Chapter 11 Understanding Traps Table 12 Performance Traps SAE continued Alarm Threshold Levels default values Interval Trap Event Text Displayed Critical Major Minor sec saeServiceActivations 4 S SAE During 2000 1000 500 60 R the last Ps D services were activated This L the threshold of T service activations A
97. ERVICE_DATA_MANAGER USER_DATA_MANAGER SAE_ConfigMgr dynamicProps 1dapAuth LdapAuthenticator Related Configuring the Directory Location for SAE Data C Web Interface D tati ocumentaton e Viewing Statistics About the Directory SRC CLI on page 140 Viewing SNMP Statistics for the Directory C Web Interface on page 163 Viewing SNMP Statistics for Directory Connections C Web Interface on page 164 Viewing SNMP Information for Client Licenses SRC CLI Purpose View SNMP information about the state of client licenses Copyright 2013 Juniper Networks Inc 141 SRC 4 6 x Monitoring and Troubleshooting Guide Action Related Documentation user host gt show sae statistics license client Configuring SAE Properties for Global Default SNMP Communities for Use with JunosE Routers and Devices Running Junos OS e Viewing SNMP Statistics for Licenses by Device C Web Interface on page 166 e Viewing SNMP Statistics for Local Licenses C Web Interface on page 167 e Viewing SNMP Statistics for Client Licenses C Web Interface on page 165 Viewing SNMP Information for Local Licenses SRC CLI on page 142 Viewing SNMP Information for Local Licenses SRC CLI Purpose Action Related Documentation View SNMP information about the state of local licenses user host gt show sae statistics license local Client License State Mode Pilot Number of licensed users 100 Number of current users 0 Expiry 2007 02 23
98. Host Statistics C Web Interface 0 0 cc ee 185 Viewing Host Process Statistics C Web Interface 186 Viewing Resolvers C Web Interface 0 0 0 eee eee 186 Viewing Resolvers C Web Interface 0 0 0 ccc eee 186 Viewing Resolver Statistics C Web Interface 187 Viewing Agents C Web Interface 0 eee eee 188 Viewing Agents C Web Interface 6 ee eee 188 Viewing Agent Statistics C Web Interface 189 Monitoring NTP SRC CEI sense is cewrsamesdwaets thaweee ceeded beeen 191 Viewing NTP Peers SRC CLI 0 eee teens 191 Viewing Statistics for NTP SRC CLI 0 eee 192 Viewing Internal Variables for NTP SRC CLI 0 eee 192 Monitoring NTP C Web Interface 00 cece eee eee eee 195 Viewing NTP Peers C Web Interface 0 0 0 ccc eee 195 Viewing Statistics for NTP C Web Interface 0 0 eee 196 Viewing NTP Status C Web Interface 0 0 eee 196 Monitoring Redirect Server SRC CLI 00 ccc cece eee ee eee eeeee 199 Viewing Statistics for the Redirect Server SRC CLI 0 00000 ee eee 199 Viewing Statistics About Filtered Traffic SRC CLI 000 199 Monitoring the Redirect Server and Filtered Traffic C Web Interface 201 Viewing Statistics for the Redirect Server C Web Interface 201 Viewing Information for Filtered Traffic C Web Interface 202 Troub
99. Iptables pane appears Iptables Reset Counters MT 3 Table x OK Reset 5 2 Select the type of table that you want to display from the Table list e nat Displays information for the iptables NAT table filter Displays information for the iptables filter table mangle Displays information for the iptables mangle table 3 Select the Reset Counters check box to rest the counters of items in the output 4 Click OK The Iptables pane displays information about filtered traffic Defining Traffic to Transmit to the Redirect Server C Web Interface Configuring the Redirect Server C Web Interface e Viewing Statistics About Filtered Traffic SRC CLI on page 199 e Viewing Statistics for the Redirect Server C Web Interface on page 201 Traffic Redirection Overview Copyright 2013 Juniper Networks Inc CHAPTER 23 Troubleshooting Network Connectivity ORC CUN Commands to Troubleshoot Connections to Remote Hosts Overview on page 203 Testing Connectivity to Remote Hosts SRC CLI on page 203 Viewing the Route Information SRC CLI on page 204 e Viewing Routing Table Information SRC CLI on page 205 Viewing Interface Information SRC CLI on page 205 Commands to Troubleshoot Connections to Remote Hosts Overview If you are troubleshooting problems with the SRC software that might be caused by connectivity problems to remote hosts you can use the following commands ping Test
100. JUNIP EL NETWORKS SRC PE Software Monitoring and Troubleshooting Guide Published 2013 11 22 Copyright 2013 Juniper Networks Inc Juniper Networks Inc 1194 North Mathilda Avenue Sunnyvale California 94089 USA 408 745 2000 www juniper net Copyright 2013 Juniper Networks Inc All rights reserved Juniper Networks Junos Steel Belted Radius NetScreen and ScreenOS are registered trademarks of Juniper Networks Inc in the United States and other countries The Juniper Networks Logo the Junos logo and JunosE are trademarks of Juniper Networks Inc All other trademarks service marks registered trademarks or registered service marks are the property of their respective owners Juniper Networks assumes no responsibility for any inaccuracies in this document Juniper Networks reserves the right to change modify transfer or otherwise revise this publication without notice SRC PE Software Monitoring and Troubleshooting Guide Release 4 6 x Copyright 2013 Juniper Networks Inc All rights reserved Revision History December 2013 Revision 1 The information in this document is current as of the date on the title page YEAR 2000 NOTICE Juniper Networks hardware and software products are Year 2000 compliant Junos OS has no known time related limitations through the year 2038 However the NTP application is known to have some difficulty in the year 2036 SOFTWARE LICENSE The terms and condit
101. LI on page 183 SRC CLI Commands to View Statistics About NIC Operations You can view statistics for the NIC process and for various NIC components Table 27 on page 175 lists the commands you use to view NIC statistics Table 27 Commands to Display NIC Statistics Sel aalgat Tare Output Displayed show nic statistics ALl NIC statistics The output for this command includes the output for the other show nic statistics commands show nic statistics agent NIC statistics for agents show nic statistics host NIC statistics for a NIC host show nic statistics process NIC statistics for the NIC process show nic statistics resolver NIC statistics for resolvers show nic statistics slot All NIC statistics for a specified slot The output for this command includes the output for the show nic statistics agent show nic statistics host show nic statistics process and show nic statistics resolver Commands Copyright 2013 Juniper Networks Inc 175 SRC 4 6 x Monitoring and Troubleshooting Guide Related Documentation Configuring the NIC SRC CLI Locating Subscriber Management Information e Viewing Statistics for the NIC Process SRC CLI on page 176 e Viewing Statistics for a NIC Host SRC CLI on page 177 SRC CLI Commands to View NIC Resolution Data on page 180 Viewing Statistics for the NIC Process SRC CLI 176 Purpose Action Meaning Related Documentation View statistics for the
102. Number of current connections 0 Number of open requests 0 Server address 0 0 0 0 Server port 3333 Time since last redirect 0 The value of the server address can be either an IPv4 or IPv6 address depending on the platform Shutting Down the Device Drivers C Web Interface e Viewing Information About SAE Device Drivers SRC CLI on page 124 Viewing SNMP Information for Routers and Devices SRC CLI on page 144 e Viewing Statistics for Specific Device Drivers SRC CLI on page 146 Viewing Statistics for Specific Device Drivers SRC CLI 146 Purpose Action View statistics for specific router drivers or device drivers To view SNMP statistics for device drivers running Junos OS user host gt show sae statistics device common junos To view SNMP statistics for JUNOSE router drivers user host gt show sae statistics device common junose cops Copyright 2013 Juniper Networks Inc Related Documentation Chapter 15 Monitoring SAE Data SRC CLI To view SNMP statistics for PCMM device drivers user host gt show sae statistics device common packetcable cops To view SNMP statistics for third party device drivers user host gt show sae statistics device common proxy For example to view SNMP statistics for device drivers running Junos OS user host gt show sae statistics device common junos SNMP Statistics Driver type Junos OS Number of close requests 0 Number of connections accepted 0 Number of current
103. ON I This component is down RAISE dirConnected 130 INFORMATION lI The directory connection has been established with DAP HOST on port LDAP PORT and has a type of CONNECTION TYPE RAISE dirConnectionFailure 131 CRITICAL I The directory connection with DAP HOST has failed RAISE dirNotAvail 132 CRITICAL I A directory connection is not available RAISE nicHostRedundStateSwitched 240 INFORMATION NIC Host The redundancy state of the NIC Host has switched to juniNicHostRedundState RAISE nicHostMisconfigured 241 INFORMATION NIC Host The NIC Host failed to start due to misconfiguration The error message is MESSAGE RAISE acpSyncCompleted 290 INFORMATION ACP State Sync ACP finished state sync with SAE for juniAcpVirtualRouterName RAISE acpRedundStateSwitched 291 INFORMATION ACP Host The redundancy state of the ACP Host has switched to juniAcpRedundState RAISE 98 Copyright 2013 Juniper Networks Inc Chapter 11 Understanding Traps Table 23 Event Traps continued Trap Event Text Displayed acpCPUsage 281 When the trap is raised the text displayed is e CRITICAL ACP acpCPUsed of congestion point is in use This exceeded the threshold of THRESHOLD RAISE where acoCPUsed is the percentage of bandwidth in use out of the total bandwidth of the congestion point e MAJOR ACP acoCPUsed of congestion point is in use This is below the threshold of THRESHOLD RAISE where acoCPUsed is t
104. Out StaticDestNat PingDoSProtect MirrorFragment SubrIntfFragment Brickwall Audio Bronze Internet Bronze Limit500kbs News Gold VPN LimitiMbs Video Silver Audio Gold RouterFragment 1 0 Mbps FWR_Rej_In MirrorAggregate Video Bronze More results available Display has reached the maximum number of results Number of skipped results 26 To restrict the number of displayed results user host gt show sae services maximum results maximum results Related gt Configuring Access to Service Data SRC CLI Documentation Reloading Services SRC CLI e Viewing Information About Services C Web Interface on page 150 Copyright 2013 Juniper Networks Inc 131 SRC 4 6 x Monitoring and Troubleshooting Guide Viewing Information About Threads SRC CLI Purpose Action Related Documentation View information about the threads and their priority on the SAE user host gt show sae threads Thread Group Thread group name system Active threads 112 Active groups 11 Max priority 10 Thread name Priority Daemon thread Reference Handler 10 true Finalizer 8 true Signal Dispatcher 9 true Thread Group Thread group name RKSTrackingQueue Active threads 5 Active groups 0 Max priority 10 Thread name Priority Daemon thread RKSTrackingQueue 0 5 true RKSTrackingQueue 1 5 true RKSTrackingQueue 2 5 true RKSTrackingQueue 3 5 true RKSTrackingQueue 4 5 true Viewing Information About Threads C Web Interface on page
105. P Statistics About RADIUS C Web Interface on page 170 e Viewing SNMP Statistics About RADIUS Clients C Web Interface on page 170 e Viewing SNMP Statistics for Devices C Web Interface on page 171 e Viewing SNMP Statistics for Specific Devices C Web Interface on page 172 e Viewing SNMP Statistics for Subscriber Sessions and Service Sessions C Web Interface on page 173 Viewing SNMP Statistics for the Directory C Web Interface Purpose View SNMP statistics for the directory Action 1 Click Monitor gt SAE gt Statistics gt Directory The Statistics Directory pane appears Copyright 2013 Juniper Networks Inc 163 SRC 4 6 x Monitoring and Troubleshooting Guide Configure Diagnose Manage Logged in as admin Refresh Preferences About Logout SAE Statistics Directory Component Display SAE information for a specified slot pate Slot Value Currently the chassis has only one slot The valid value is 0 Disk Default 0 Interfaces OK Reset Iptables JPS 2007 Juniper Networks Inc All Rights Reserved Trademark Notice Privacy Juniper yoo Net 2 Inthe Slot box enter the number of the slot for which you want to display SNMP statistics for the directory 3 Click OK The Statistics Directory pane displays statistics for the directory Related Configuring SAE Properties for Global Default SNMP Communities for Use with JunosE Documentation Routers and Devices Running Junos OS Vi
106. P statistics for subscriber and service sessions Action To display real time SNMP statistics for subscriber and service sessions user host gt monitor sae statistics sessions To specify the time interval for refreshing the data user host gt monitor sae statistics sessions interval interval Related Viewing Statistics for Subscriber and Service Sessions SRC CLI on page 147 D tati en ye Output Control Keys for monitor Command 148 Copyright 2013 Juniper Networks Inc CHAPTER 16 Monitoring SAE Data C Web Interface Viewing SAE Data C Web Interface on page 149 Viewing Information About Subscriber Sessions C Web Interface on page 157 e Viewing SNMP Information C Web Interface on page 163 Viewing SAE Data C Web Interface You can view data currently stored in the SAE server s memory by e Viewing e Viewing e Viewing e Viewing e Viewing e Viewing nformation About the Directory Blacklist C Web Interface on page 149 nformation About Services C Web Interface on page 150 nformation About Licenses C Web Interface on page 151 nformation About Policies C Web Interface on page 151 nformation About Device Drivers C Web Interface on page 152 nformation About Interfaces C Web Interface on page 153 Viewing Equipment Registrations C Web Interface on page 154 e Viewing Login Registrations C Web Interface on page 155 Viewing Information About Threads C Web Interface on page
107. Peers C Web Interface on page 195 Copyright 2013 Juniper Networks Inc Viewing Statistics for NTP C Web Interface on page 196 197 SRC 4 6 x Monitoring and Troubleshooting Guide 198 Copyright O 2013 Juniper Networks Inc CHAPTER 21 Monitoring Redirect Server SRC CLI e Viewing Statistics for the Redirect Server SRC CLI on page 199 e Viewing Statistics About Filtered Traffic SRC CLI on page 199 Viewing Statistics for the Redirect Server SRC CLI Purpose Action Related Documentation View statistics for redirect server user host gt show redirect server statistics Redirect Server Uptime 1270724 713 s Accepted Requests 25 Rejected Requests 0 User limit leaky buckets 0 User limits reached 0 Global limits reached 0 Configuring the Redirect Server SRC CLI e Viewing Statistics About Filtered Traffic SRC CLI on page 199 Viewing Statistics for the Redirect Server C Web Interface on page 201 Traffic Redirection Overview Viewing Statistics About Filtered Traffic SRC CLI Purpose Action You can obtain information about the packets filtered on a C Series Controller by accessing statistics for the iptables Linux tool You can also reset the counters for this tool To view information about packet filtering on a C Series Controller userGhost gt show iptables lt nat filter mangle gt lt reset counters gt where nat Displays information for the nat table fo
108. S Authentication 5 2 1 60 Client During the last Ps D bad authenticators errors occurred This L the threshold of T A saeAuthPendingRequests 45 S SAE RADIUS Authentication 50 25 10 60 AV Client The number of pending requests is D This L the threshold of T pending requests A saeAuthTimeouts 46 S SAE RADIUS Authentication 5 2 60 R Client During the last Ps D timeouts occurred This L the threshold of T timeouts A 90 Copyright 2013 Juniper Networks Inc Chapter 11 Understanding Traps Table 14 Performance Traps Authentication continued Alarm Threshold Levels default values Trap Event Text Displayed Interval sec 5 2 1 60 saeAuthUnknownTypes 47 S SAE RADIUS Authentication Client During the last Ps D unknown type errors occurred This L the threshold of T unknown type errors A saeAuthPacketsDropped 48 S SAE RADIUS Authentication 5 2 1 60 R Client During the last Ps D packets were dropped This L the threshold of T dropped packets A Related Performance Traps on page 83 D mentation ocumen ano Trap Numbers in Performance Traps on page 84 Configuring Performance Traps SRC CLI on page 80 NIC Performance Traps Table 15 on page 91 lists the performance traps for NIC Table 15 Performance Traps NIC Alarm Threshold Levels default values Trap Event Text Displayed ore er Interval sec R AV 10 5 1 nicHostReslvErrors 230 S NIC Host
109. SAE Viewing Information About the Directory Blacklist C Web Interface on page 149 Viewing Information About SAE Device Drivers SRC CLI on page 124 Copyright 2013 Juniper Networks Inc 123 SRC 4 6 x Monitoring and Troubleshooting Guide Viewing Information About SAE Device Drivers SRC CLI Purpose View information about SAE device drivers Each device driver manages one logical router instance Action To view information about the state of SAE device drivers user host gt show sae drivers JunosE Driver Device name default dryad Device type junose Device IP 10 227 7 244 Local IP 10 227 7 172 TransportRouter default dryad Device version 7 2 0 Start time Tue Feb 13 14 18 44 EST 2007 Number of notifications 20 Number of processed added 14 Number of processed changed Number of processed deleted Number of provisioning attempt Number of provisioning attempt failed Number of outstanding decisions Number of SAP Number of PAP Number of active user sessions 100 Number of active service sessions 0 Job Queue Size 0 Age ms 1 Total enqueued 28 Total dequeued 28 Average job time ms 426 State Synchronization Number recovered subscriber sessions Number recovered service sessions Number recovered interface sessions Number invalid subscriber sessions Number invalid service sessions Number invalid interface sessions Background restoration start time Tue HENOQOOWOO oooo0co Background restoration end time
110. SRC CLI on page 145 Viewing the Synchronization Status of SAE Session Stores SRC CLI Purpose Action View the synchronization status of session stores Session stores are used by SAE to store user session data and the service session data To view the SAE session stores synchronization status user host gt show sae sessionstore stats Session store Stats Report Interval Last Report Time Operations Start Time Number of Local Synchronizations Time for All Local Synchronizations Bytes for All Local Synchronizations Number of All Local Synchronized Files Number of Community Synchronizations Time for All Community Synchronizations Number of Remote Updates Time for All Remote Updates Number of Operations Time for All Operations Number of Rotations Time for All Rotations Bytes for All Rotations All Rotated Operations Number of Snapshots Time for All Snapshots Number of Keys for All Snapshots Copyright 2013 Juniper Networks Inc 300000 ms Thu Sep 12 10 54 12 UTC 2013 Thu Sep 12 10 54 12 UTC 2013 2 106 ms 0 2 2 108 ms 0 0 ms 13 2 ms 125 SRC 4 6 x Monitoring and Troubleshooting Guide Related Documentation Number of Flushes 3 Time for A11 Flushes 1 ms Storing Subscriber and Service Session Data Configuring the Session Store Feature SRC CL e Viewing Information About SAE Device Drivers SRC CLI on page 124 Viewing Information About SAE Interfaces SRC CLI Purpose
111. SRC PE Release 7 0 A 7 0 0 151 System Time Current time 2007 01 02 17 29 19 EST Uptime 15 days 1 07 Number of active users 3 Load Averages 1m 5m 15m 0 23 0 22 0 14 Memory Total 15G Free 12G CPU Info Number of CPU 4 CPU Model Dual Core AMD Opteron tm Processor 265 Clock Speed 1804 132 MHz Disk Information Mountpoint Total Used Use 2015M 956M 47 altroot 2015M 35M 1 altvar 29G 75M 0 boot 98M 14M 14 var 31G 216M 0 Temperature System 23 C CPU 1 33 C CPU 2 35 C Fan speed Fan 1 9375 RPM Fan 2 9375 RPM For information about configuring C Series Controllers see the SRC PE C Web Interface Configuration Guide Viewing Information About Boot Messages SRC CLI on page 111 e Viewing Information About the System C Web Interface on page 115 e Viewing Information About Components Installed SRC CLI on page 111 e Viewing Information About System Disk Status C Web Interface on page 119 Copyright 2013 Juniper Networks Inc Chapter 13 Monitoring the System SRC CLI Viewing Information About Components Installed SRC CLI Purpose View release and status information for SRC components installed on a system Action user host gt show component Installed Components Name Version Status cli Release 7 0 Build CLI A 7 0 0 0171 running acp Release 7 0 Build ACP A 7 0 0 0174 disabled jdb Release 7 0 Build DIRXA A 7 0 0 0176 running editor Release 7 0 Build EDITOR A 7 0 0 017
112. Subscribers Use the following command to log in simulated IPv4 authenticated interface subscribers request sae login ipv4 authenticated interface virtual router virtual router address address login name login name lt service bundle service bundle gt lt radius class radius class gt lt interface name interface name gt lt interface alias interface alias gt lt interface description interface description gt lt nas port id nas port id gt To log in a simulated IPv4 authenticated interface subscriber 1 Issue the request sae login ipv4 authenticated interface command Specify the virtual router address and login name options user host gt request sae login ipv4 authenticated interface virtual router virtual router address address login name login name Optional To specify the service bundle used when logging in the simulated subscriber use the service bundle option Optional To specify the RADIUS class used when logging in the simulated subscriber use the radius class option Optional To specify the virtual interface used when logging in the simulated subscriber use the interface name option Optional To specify the interface description used when logging in the simulated subscriber use the interface alias option If you are simulating JunosE routers the interface alias is the description that is configured on JunosE routers with the interface description command Optional To specify the alternate inte
113. Time 21 S SAE RADIUS 2250 1500 750 60 AV Accounting Client The round trip message time is Dms This L the threshold of Tms A saeAccRetransmissions 22 S SAE RADIUS J 2 1 60 R Accounting Client During the last Ps D retransmissions occurred This L the threshold of T retransmissions A saeAccMalformedResponses 23 S SAE RADIUS 5 2 1 60 R Accounting Client During the last Ps D malformed responses occurred This L the threshold of T malformed responses A 88 Copyright 2013 Juniper Networks Inc Chapter 11 Understanding Traps Table 13 Performance Traps Accounting continued Alarm Threshold Levels default values Interval Trap Event Text Displayed Critical Major Minor sec saeAccBadAuthenticators 24 S SAE RADIUS 5 2 1 60 R Accounting Client During the last Ps D bad authenticator error occurred This L the threshold of T bad authenticators errors A saeAccPendingRequests 25 S SAE RADIUS 50 25 10 60 AV Accounting Client The number of pending requests is D This L the threshold of T pending requests A saeAccTimeouts 26 S SAE RADIUS 30 20 10 60 R Accounting Client During the last Ps D timeouts occurred This L the threshold of T timeouts A saeAccUnknownTypes 27 S SAE RADIUS 30 20 10 60 R Accounting Client During the last Ps D unknown type errors occurred This L the threshold of T unknown type errors A saeAccPac
114. Update e License server juniSdxLicApplEntry NiC juniNicHostHeapLimit juniNicHostHeapUsed juniNicHostResolutions juniNicHostUnmatchedResolutions juniNicHostResolutionErrors juniNicHostResolutionTime SAE juniSaeRouterCommonCurConn juniSdxSaeUserLicenses e Collecting Data with the Activity Monitor SRC CLI on page 210 Collecting Data with the Activity Monitor C Web Interface on page 211 e Viewing Graphs C Web Interface on page 212 e Viewing Graphs from a Web Page on page 212 Collecting Data with the Activity Monitor SRC CLI 210 You can collect data with the Activity Monitor for specific components over a specified time Before you perform data collection with the Activity Monitor make sure the Activity Monitor activity CLI cli and C Web interface webadm components are enabled To perform data collection with the Activity Monitor user host gt request support information Some of the information retrieved includes System log messages from the var log messages directory The configuration in XML format Copyright 2013 Juniper Networks Inc Chapter 25 Monitoring Activity for SRC Components The host name in the name of the diagnostic file To perform data collection for specific components user host gt request support information component where component is one of the following acp SRC Admission Control Plug In activity Activity Monitor agent
115. Viewing SNMP Statistics About RADIUS C Web Interface 170 Viewing SNMP Statistics About RADIUS Clients C Web Interface 170 Copyright 2013 Juniper Networks Inc ix SRC 4 6 x Monitoring and Troubleshooting Guide Chapter 17 Chapter 18 Chapter 19 Chapter 20 Chapter 21 Chapter 22 Chapter 23 Viewing SNMP Statistics for Devices C Web Interface 171 Viewing SNMP Statistics for Specific Devices C Web Interface 172 Viewing SNMP Statistics for Subscriber Sessions and Service Sessions C Web Interface aen 404 se TE tomes oad Gearners bene we 173 Monitoring and Troubleshooting the NIC SRC CLI 00 eee 175 SRC CLI Commands to View Statistics About NIC Operations 175 Viewing Statistics for the NIC Process SRC CLI 000 000 eee ee 176 Viewing Statistics fora NIC Host SRC CLI suse seen eee 177 Viewing Statistics for NIC Resolvers SRC CLI 0 0 cc eee 177 Viewing Statistics for NIC Agents SRC CLI 0 0 0 oe ERR eee 179 SRC CLI Commands to View NIC Resolution Data 180 Viewing Data for NIC Resolvers SRC CLI 0 0 0 0 cee 180 Viewing Data for NIC Agents SRC CLI renee eee 182 Troubleshooting NIC Data Resolution SRC CLI 0 0 0 0 cee eee 183 Monitoring the NIC C Web Interface 0 0 cece eee eee eee 185 Viewing Hosts C Web Interface 0 eee eee 185 Viewing
116. ae logout ip Copyright 2013 Juniper Networks Inc 47 SRC 4 6 x Monitoring and Troubleshooting Guide request sae logout login name request sae logout session id show sae subscribers show sae subscribers accounting user id show sae subscribers dn show sae subscribers ip show sae subscribers login name show sae subscribers session id For detailed information about each command see the SRC PE CLI Command Reference Related Simulated Subscribers Overview on page 47 Hecumentanon Logging In Simulated Subscribers SRC CLI on page 48 Logging Out Simulated Subscribers SRC CLI on page 52 e Viewing Subscriber Sessions SRC CLI on page 51 Logging In Simulated Subscribers SRC CLI You can log in IPv4 subscribers in the following ways Logging In Authenticated DHCP Subscribers on page 48 Logging In Authenticated Interface Subscribers on page 49 Logging In Unauthenticated DHCP Subscribers on page 50 Logging In Unauthenticated Interface Subscribers on page 50 Logging In Authenticated DHCP Subscribers Use the following command to log in simulated IPv4 authenticated DHCP subscribers request sae login ipv4 authenticated dhcp virtual router virtual router address address login name login name mac address mac address lt service bundle service bundle gt lt radius class radius class gt lt interface name interface name gt lt interface alias interface alias gt lt interface description int
117. age 20 G 10 G Fri 16 Sun 18 Tue 20 Thu 22 Sat 24 Mon 26 From 2009 01 15 00 00 To 2009 01 28 00 00 E Used Avg 506 79 M Min 176 72 M Max 506 79 M W Limit Current 24 99 G Related Collecting Data with the Activity Monitor SRC CLI on page 210 Documentation Collecting Data with the Activity Monitor C Web Interface on page 211 e Viewing Graphs C Web Interface on page 212 e Monitoring Activity on C Series Controllers on page 209 Copyright 2013 Juniper Networks Inc 215 SRC 4 6 x Monitoring and Troubleshooting Guide 216 Copyright O 2013 Juniper Networks Inc PART 6 Index Index on page 219 Copyright O 2013 Juniper Networks Inc 217 SRC 4 6 x Monitoring and Troubleshooting Guide 218 Copyright O 2013 Juniper Networks Inc Index A Activity Monitor data collecti Mesna graphs viewing OVEPNI EW an n nR E NS C C Series Controllers boot messages viewing C Web interface SRG Clo ieii ensaia fe interface information monitoring C Webi nterfa Csank 115 system date VICEWING cccccscesesessescssessessstseeseseseeeees 116 system information viewing C Web INTCrfACE csessessestestestessesessesesteseeseesestesees 116 SRC CE FAE EEN ERE 109 C Web interface monitoring OPTtiONS cceeseesesstseseseseseeseceeseseseeees 105 conventions NOCE ICONS sas a XV LOTS lt r eee ee Ore ee pe ee eee Eee ERE tay XV currently active service sessions viewing on SAE SRECE ra
118. age read time 2 Average write time 23 Directory host 127 0 0 1 Directory port 389 Directory type primary Primary restore time 83218 Event queue length 0 DES connection Connection ID 1dapAuth LdapAuthenticator Number of read Number of write Number of events sent Number of events dropped Average read time Average write time oooo0co 140 Copyright 2013 Juniper Networks Inc Chapter 15 Monitoring SAE Data SRC CLI Directory host 127 0 0 1 Directory port 389 Directory type primary Primary restore time 83200 Event queue length 0 To view information about particular directory connections specify all or part of the connection ID user host gt show sae statistics directory connections filter filter For example if you wanted to view the directory connection that contained ldap in its connection ID user host gt show sae statistics directory connections filter ldap DES connection Connection ID 1dapAuth LdapAuthenticator Number of read 0 Number of write 0 Number of events sent 0 Number of events dropped 0 Average read time 0 Average write time 0 Directory host 127 0 0 1 Directory port 389 Directory type primary Primary restore time 83608 Event queue length 0 To view only the directory connection IDs user host gt show sae statistics directory connections brief Directory Connections FEEDBACK_DATA_MANAGER EQUIPMENT_DATA_MANAGER POM_Engine LICENSE_MANAGER SAE_ConfigMgr adminLdap LdapAuthenticator S
119. ages in a File C Web Interface on page 39 Configuring NIC to Store Log Messages in a File C Web Interface To configure component logging for NIC 1 2 38 Click Configure expand Shared and then click NIC The NIC pane appears In the side pane expand a configuration scenario such as Scenario OnePopSharedlp Copyright 2013 Juniper Networks Inc Related Documentation Chapter 4 Configuring Logging for SRC Components C Web Interface In the side pane expand a host such as Demohost The Hosts pane appears From the Create new list select Logger The name of the logger appears in the side pane and the Logger pane Expand the logger in the side pane and then click File or Syslog Click Create enter information as described in the Help text in the main pane and click Apply Configuring an SRC Component to Store Log Messages in a File SRC CLI on page 26 Configuring ACP to Store Log Messages in a File C Web Interface on page 37 Configuring the SAE to Store Log Messages in a File C Web Interface on page 38 Configuring the SNMP to Store Log Messages in a File C Web Interface on page 39 Configuring JPS to Store Log Messages in a File C Web Interface on page 39 Configuring the SNMP to Store Log Messages in a File C Web Interface To configure component logging for SNMP 1 Related Documentation Click Configure expand Snmp and then click Agent The Agent pane appears From t
120. ame value specified in any one of the SingleDevKey expressions in a deviceFilterKey varName router name or Variable names supported to specify the deviceFilterKey interface name or login name Copyright 2013 Juniper Networks Inc 21 SRC 4 6 x Monitoring and Troubleshooting Guide Table 6 SAE Debug Device Filter Formatting Rules continued Rule Definition Meaning valName AlphaNumeric Value name associated with each variable name A valName can contain alphanumeric characters as well as a wildcard character SingleDevKey varName Equality Pair of varName and valName associated by using an Equality Multiple valName SingleDevKey expressions are associated by using Operands Table 7 on page 22 lists some examples of network device specific SAE debug filter configurations Table 7 Sample Combinations of Conditions for the device filter key Expression Syntax Notes set device filter key router name erx440 amp interface name Fast Uses the AND operator set device filter key router name erx440 interface name Fast Uses the OR operator set device filter key router name erx440 amp interface name Fast Uses the AND and OR operators login name jane virneo net set device filter key router name erx440 amp interface name Fast amp Uses the wildcard character for pattern match login name jane net set device filter key router name erx440 router name erx448
121. an output style from the Style list Click OK The Drivers pane displays the status of the devices running on the SAE Connections to Managed Devices Viewing SNMP Information for Routers and Devices SRC CLI on page 144 Viewing Statistics for Device Drivers SRC CLI on page 145 Viewing Statistics for Specific Device Drivers SRC CLI on page 146 Viewing Information About SAE Device Drivers SRC CLI on page 124 Viewing Information About Interfaces C Web Interface Purpose View information about the interfaces available on the router Copyright 2013 Juniper Networks Inc 153 SRC 4 6 x Monitoring and Troubleshooting Guide Action 1 Click Monitor gt SAE gt Interfaces The Interfaces pane appears SAE Interfaces Name of router interface 5 Interface Name Value All or part of the interface name D Default No value Number of results to be displayed Maximum Results Legal range 1 INF Default 25 Display SAE information for a specified slot Slot Value Currently the chassis has only one slot The valid value is 0 Default 0 Output style Choices Style hs brief Display only interface names Default Detail Name of virtual router Virtual Router Value All or part of the virtual router name Default No value o Reset j 2 Inthe Interface Name box enter the name of the router interface for which you want to display information or leave the box blank to display information about all router
122. ance trap edit user host edit snmp notify 2 Specify the type of trap and the trap name edit snmp notify user host set alarm category category name alarm alarm name You can select from the list of trap types and their associated traps or create new traps 3 Optional Specify the interval at which the variable associated with the trap is polled edit snmp notify alarm category category name alarm alarm name user host set interval interval 4 Specify the threshold above which a critical alarm is generated edit snmp notify alarm category category name alarm alarm name user host set critical critical 5 Specify the threshold above which a major alarm is generated edit snmp notify alarm category category name alarm alarm name 80 Copyright 2013 Juniper Networks Inc Chapter 10 Configuring the SNMP Traps SRC CLI user host set major major 6 Specify the threshold above which a minor alarm is generated edit snmp notify alarm category category name alarm alarm name user host set minor minor Related Configuring Event Traps SRC CLI on page 81 Documentation Configuration Statements for the SNMP Traps on page 79 SAE Performance Traps on page 86 Performance Traps on page 83 Trap Numbers in Performance Traps on page 84 Configuring Event Traps SRC CLI Use the following configuration statements to configure event traps snmp notify event category category name snmp notify event cate
123. ane appears Configure Diagnose Manage Logged in as admin Refresh Preferences About Logout NIC Statistics Host N Component Date Slot Disk OK Reset Interfaces ox Reset iptables JPS NTP Redirect Server 007 Juniper Networks Inc All Rights Reserved Trademark Notice Privacy Juniper J Het 2 Inthe Slot box enter the number of the slot for which you want to display host statistics 3 Click OK The Statistics Host pane displays the properties for the host Copyright 2013 Juniper Networks Inc 185 SRC 4 6 x Monitoring and Troubleshooting Guide Related gt Configuring the NIC C Web Interface Documentation Viewing Host Process Statistics C Web Interface on page 186 e Viewing Statistics for a NIC Host SRC CLI on page 177 Viewing Host Process Statistics C Web Interface Purpose View NIC host process statistics Action 1 Click Monitor gt NIC gt Statistics gt Process The Statistics Process pane appears Configure Diagnose Manage Logged in as admin Refresh Preferences About Logout NIC Statistics Process Component Date Slot Disk inerteces ss al Iptables JPS NTP Redirect Server 007 Juniper Networks Inc All Rights Reserved Trademark Notice Privacy e EUU AoW Hee 2 Inthe Slot box enter the number of the slot for which you want to display host process statistics 3 Click OK The Statistics Process pane displays the statistics fo
124. ant to display license information 3 Click OK The Licenses pane displays license information Related Viewing SNMP Statistics for Licenses by Device C Web Interface on page 166 Documentation Viewing SNMP Statistics for Local Licenses C Web Interface on page 167 e Viewing SNMP Statistics for Client Licenses C Web Interface on page 165 e Viewing SNMP Information for Local Licenses SRC CLI on page 142 e Viewing SNMP Information for Client Licenses SRC CLI on page 141 Viewing Information About Policies C Web Interface Purpose View information about the policies available on the SAE Copyright 2013 Juniper Networks Inc 151 SRC 4 6 x Monitoring and Troubleshooting Guide Action Related Documentation Viewing Information About Device Drivers C Web Interface Purpose 152 1 Click Monitor gt SAE gt Policies The Policies pane appears SAE Policies Policy Group DO Maximum Results Slot L Style FE BR FE Select an output style from the Style list Click OK Configuring Access to Policy Data SRC CLI Name of a policy group Value All or part of the policy group name Default No value Number of results to be displayed Legal range 1 INF Default 25 Display SAE information for a specified slot Value Currently the chassis has only one slot The valid value is 0 Default 0 Output style Choices brief Display only policy group names Default value
125. ary of the users select the Brief check box 3 Click OK The Users pane displays the information about the users on the system Configuring User Accounts C Web Interface Viewing Information About the SRC CLI C Web Interface on page 121 Viewing Information About SRC CLI User Permissions C Web Interface on page 122 Viewing Information About the Juniper Networks Database in Community Mode C Web Interface 120 Purpose Action View information about the Juniper Networks database when it runs in community mode Click Monitor gt System gt LDAP gt Community The LDAP Community pane appears and displays information about the Juniper Networks database Configure Diagnose Manage Logged in as sleswayball Update Preferences About Logout System Ldap Community Component JDB is not configured in community mode Date There is nothing to be displayed Disk Interfaces Copyright 2007 Juniper Networks Inc AllRights Reserved Trademark Notice Privacy Juniper ger Net Copyright 2013 Juniper Networks Inc Chapter 14 Monitoring the System C Web Interface Related Configuring the Juniper Networks Database to Run in Community Mode C Web Interface D tati eee e Viewing Statistics for the Juniper Networks Database C Web Interface on page 121 Viewing Statistics for the Juniper Networks Database C Web Interface Purpose View statistics for the Juniper Networks database
126. atement that configures the logging destination for the component edit user host component hierarchy logger name file For example edit user host edit shared sae configuration logger sae file log 1 file edit user host edit snmp agent logger snmp file log 1 file edit user host edit slot O jps logger jps file log 1 file 2 Specify the filter to define which event messages the software logs or disregards 26 Copyright 2013 Juniper Networks Inc Chapter 3 Configuring Logging for SRC Components with the CLI edit shared sae configuration logger sae file log 1 file user host set filter filter If you do not specify a filter logging to the specified file is disabled Filters can specify the logging level such as debug or can specify expressions 3 Optional Enable network device specific filtering for SAE debug logs based on router name interface name or login name For more information about format rules Used to define the expression while enabling network device specific filtering see the table SAE Debug Device Filter Formatting Rules in Categories and Severity Levels for Event Messages on page 7 edit shared sae configuration logger sae file log 1 file user host set device filter key device filter key NOTE e SRC network device specific filtering for SAE debug logs is supported on JunosE COPS and Junos OS JSRC devices The device filter key option is available only on the SAE
127. atement that defines the thresholds for voltage sensors edit user host edit snmp monitor chassis alarm voltage sensor For example edit user host edit snmp monitor chassis alarm voltage 1 8v edit user host edit snmp monitor chassis alarm voltage 3 3v edit user host edit snmp monitor chassis alarm voltage 5v edit user host edit snmp monitor chassis alarm voltage 12v edit user host edit snmp monitor chassis alarm voltage negativel2v NOTE The voltage negativel2v option is not available on the C3000 and C5000 Controllers 3 Optional Specify the lower threshold for the minor alarm For example edit snmp monitor chassis alarm voltage 1 8v user host set below minor 1644 4 Optional Specify the lower threshold for the major alarm For example edit snmp monitor chassis alarm voltage 1 8v user host set below major 1632 5 Optional Specify the lower threshold for the critical alarm For example edit snmp monitor chassis alarm voltage 1 8v Copyright 2013 Juniper Networks Inc 75 SRC 4 6 x Monitoring and Troubleshooting Guide user host set below critical 1620 Optional Specify the upper threshold for the minor alarm For example ao edit snmp monitor chassis alarm voltage 1 8v user host set over minor 2028 Optional Specify the upper threshold for the major alarm For example N edit snmp monitor chassis alarm voltage 1 8v user host set over major 2040
128. b 20 19 27 26 buffy pseudo ID 129642 kern info pseudo device winlock0 Feb 20 19 27 26 buffy genunix ID 936769 kern info winlockO is pseudo winlock 0 Feb 20 19 27 27 buffy pseudo ID 129642 kern info pseudo device lockstatO Related Viewing Information About a C Series Controller SRC CLI on page 109 Documentation e Viewing Information About Boot Messages SRC CLI on page 111 e Viewing Information About the System C Web Interface on page 115 Viewing Information About System Disk Status C Web Interface on page 119 Viewing Information About Security Certificates C Web Interface Purpose View messages generated during SRC software startup Action 1 Click Monitor gt Security gt Certificate The Certificate pane appears Configure Diagnose Manage admin Refresh Preferences About Logout SER Security on Certificate Component Date Trusted MC Disk weertcce Iptables JPS NIC NTP Redirect Server Juniper Networks In ghts ed Trademark Notice Privacy Juniper gait Net 2 To display authority certificates select the Trusted check box 3 Click OK The Certificate pane displays the security certificates 118 Copyright 2013 Juniper Networks Inc Chapter 14 Monitoring the System C Web Interface For information about managing security digital certificates see Digital Certificates Overview Related Viewing Information About Security Certificates SRC CLI on page 113 Do
129. b Interface Purpose View information about all system interfaces Action 1 Click Monitor gt Interfaces The Interfaces pane appears Interfaces D Interface Name aa Reset 0 2 Inthe Interface name box enter the name of the interface for which you want to view data 3 Click OK The Interfaces pane displays the information about the interface Related Viewing Interface Information SRC CLI on page 205 Documentation e Viewing Information About the Routing Table C Web Interface on page 207 208 Copyright 2013 Juniper Networks Inc CHAPTER 25 Monitoring Activity for SRC Components Monitoring Activity on C Series Controllers on page 209 Collecting Data with the Activity Monitor SRC CLI on page 210 Collecting Data with the Activity Monitor C Web Interface on page 211 Viewing Graphs C Web Interface on page 212 e Viewing Graphs from a Web Page on page 212 Monitoring Activity on C Series Controllers The SRC software provides logging support and general statistics for SRC components The Activity Monitor collects diagnostic information about the state of a component at a specific time and archives this information in one file You can collect the following information Log files e Configuration files stdout stderr Round robin database rrd files generated by the Activity Monitor Output from system monitoring commands System log files SAR data files and
130. b Interface on page 201 e Viewing Information for Filtered Traffic C Web Interface on page 202 Viewing Statistics for the Redirect Server C Web Interface Purpose View statistics for the redirect server Action 1 Click Monitor gt Redirect Server gt Statistics The Statistics pane appears Configure Diagnose Manage Logged in as admin Refresh Preferences About Logout Redirect Server Statistics Component Date Output Style z Disk OK Reset P Iptables JPS 007 Juniper Networks Inc Al Rights Reserved Trademark Notice Privacy Juniper Pees 2 Select astyle from the Output Style list 3 Click OK The Statistics pane displays the redirect server statistics Related Configuring General Properties for the Redirect Server C Web Interface D mentation See Configuring the Redirect Server C Web Interface Viewing Statistics for the Redirect Server SRC CLI on page 199 Viewing Information for Filtered Traffic C Web Interface on page 202 Copyright 2013 Juniper Networks Inc 201 SRC 4 6 x Monitoring and Troubleshooting Guide Traffic Redirection Overview Viewing Information for Filtered Traffic C Web Interface Purpose Action Related Documentation 202 View information about filtered traffic with the iptables Linux tool when you are using C Web to monitor the C Series Controller To view information about the filtered traffic 1 Click Monitor gt Iptables The
131. can include an expression that defines the categories and severity levels of event messages SRC 4 6 x Monitoring and Troubleshooting Guide that the software saves You can also enable network device specific filtering for service activation engine SAE debug logs Defining Categories The category of an event message defines the SRC component that generated the event message If you want to view only event logs in a specific category you can define a variable lt category gt which is a text string that matches the name of a category This variable is not case sensitive To view the names of categories for event messages view a log file for one of the default filters For example purposes Table 3 on page 8 lists the SAE logging categories and associated severity levels These categories are relevant only for loggers configured with the shared sae configuration logger statement The extension refers to loggers that dynamically change their name at runtime Juniper Networks Customer Service can also provide names of categories for other components especially for troubleshooting purposes Table 3 SAE Categories and Severity Levels Category Extension Severity Level AAAExtIntf error debug debug 8 AAAExtIntflDGenerator error AAALdapListener error debug AAARouterDriver info error debug AAASolicitedJob info warning error debug AccessManager info error debug AccountingFileDic
132. cated interface command Specify the virtual router and interface name options user host gt request sae login ipv4 authenticated interface virtual router virtual router interface name interface name 2 Optional To specify the IP address from which you log in the simulated subscriber use the address option 3 Optional To specify the fully qualified name used to log in the simulated subscriber use the login name option 4 Optional To specify the service bundle used when logging in the simulated subscriber use the service bundle option 5 Optional To specify the RADIUS class used when logging in the simulated subscriber use the radius class option 6 Optional To specify the interface description used when logging in the simulated subscriber use the interface alias option If you are simulating JunosE routers the interface alias is the description that is configured on JunosE routers with the interface description command 7 Optional To specify the alternate interface name used when logging in the simulated subscriber use the interface description option 8 Optional To specify the port identifier of an interface used when logging in the simulated subscriber use the nas port id option Related Logging Out Simulated Subscribers SRC CLI on page 52 pocymentatan Viewing Subscriber Sessions SRC CLI on page 51 Commands to Manage Simulated Subscribers on page 47 Simulated Subscribers Overview on page
133. ce Purpose View information about the threads and their priority on the SAE Action 1 156 Click Monitor gt SAE gt Threads The Threads pane appears Copyright 2013 Juniper Networks Inc Chapter 16 Monitoring SAE Data C Web Interface Configure Diagnose Manage Logged in as admin Refresh Preferences About Logout Component Display SAE information for a specified slot nee Slot Value Currently the chassis has only one slat The valid value is 0 Disk Default 0 Interfaces oj Reset Iptables JPS 007 Juniper Networks Inc Al Rights Reserved Trademark Notice Privacy E ee 2 Inthe Slot box enter the number of the slot for which you want to display thread information 3 Click OK The Threads pane displays information about threads Related Viewing Information About Threads SRC CLI on page 132 Documentation Viewing Information About Subscriber Sessions C Web Interface Information about Subscriber Sessions on page 157 e Viewing Information About Subscriber Sessions by DN C Web Interface on page 158 e Viewing Information About Subscriber Sessions by IP Address C Web Interface on page 159 Viewing Information About Subscriber Sessions by Login Name C Web Interface on page 160 e Viewing Information About Subscriber Sessions by Service Name C Web Interface on page 161 Viewing Information About Subscriber Sessions by Session ID C Web Interface on page 162
134. ceiving data by running the show nic data resolver command See Viewing Data for NIC Resolvers SRC CLI on page 180 For each resolver which is identified by a component name such as realms login Cl the output should show a value such as default sys for the key Vr and the NIC value for that key such as the IOR that identifies an SAE 2 If NIC is not receiving data determine which agent or agents are not receiving data by running the show nic data agent command See Viewing Data for NIC Agents SRC CLI on page 182 3 Review your NIC configuration to make sure that NIC is configured correctly by running the show command for the NIC configuration scenario For example edit shared nic scenario OnePop user host show Related NIC Resolution Process Overview Documentation NIC Configuration Scenarios 184 Copyright 2013 Juniper Networks Inc CHAPTER 18 Monitoring the NIC C Web Interface Viewing Hosts C Web Interface on page 185 Viewing Resolvers C Web Interface on page 186 e Viewing Agents C Web Interface on page 188 Viewing Hosts C Web Interface You can view statistics for hosts and the host process by Viewing Host Statistics C Web Interface on page 185 Viewing Host Process Statistics C Web Interface on page 186 Viewing Host Statistics C Web Interface Purpose View NIC host statistics Action 1 Click Monitor gt NIC gt Statistics gt Host The Statistics Host p
135. connectivity to a remote host traceroute Display the route from the local host to a remote host and back show interfaces Display information about system interfaces show route Display information from the system routing table Related Testing Connectivity to Remote Hosts SRC CLI on page 203 Documentation Viewing the Route Information SRC CLI on page 204 Viewing Routing Table Information SRC CLI on page 205 Viewing Interface Information SRC CLI on page 205 Testing Connectivity to Remote Hosts SRC CLI Purpose Test connectivity to a remote host Copyright 2013 Juniper Networks Inc 203 SRC 4 6 x Monitoring and Troubleshooting Guide Action Related Documentation user host gt ping PING 10 227 7 45 10 227 7 45 56 84 bytes of data 64 bytes from 10 227 7 45 icmp_seq 0 ttl 63 time 0 560 ms 64 bytes from 10 227 7 45 icmp_seq 1 ttl 63 time 0 613 ms 64 bytes from 10 227 7 45 icmp_seq 2 ttl 63 time 0 641 ms 64 bytes from 10 227 7 45 icmp_seq 3 ttl 63 time 0 653 ms 64 bytes from 10 227 7 45 icmp_seq 4 ttl 63 time 0 651 ms 64 bytes from 10 227 7 45 icmp_seq 5 ttl 63 time 0 418 ms 64 bytes from 10 227 7 45 icmp_seq 6 ttl 63 time 0 440 ms 64 bytes from 10 227 7 45 icmp_seq 7 ttl 63 time 0 454 ms 64 bytes from 10 227 7 45 icmp_seq 8 ttl 63 time 0 466 ms 64 bytes from 10 227 7 45 icmp_seq 9 ttl 63 time 0 478 ms 64 bytes from 10 227 7 45 icmp_seq 10 ttl 63 time 0 488 ms NNNNNNNN NNN
136. cs for NTP C Web Interface Purpose Display statistics for NTP Action 1 Click Monitor gt NTP gt Statistics The Statistics pane appears NTP Statistics D No Resolve 7 OK Reset OU 2 To suppress symbolic addressing select the No Resolve box 3 Click OK The Statistics pane displays statistics for NTP Related Specifying a Basic NTP Configuration on a C Series Controller C Web Interface Hecomentaton e Viewing Statistics for NTP SRC CLI on page 192 Viewing NTP Peers C Web Interface on page 195 e Viewing NTP Status C Web Interface on page 196 Viewing NTP Status C Web Interface Purpose Display status for NTP Action 1 Click Monitor gt NTP gt Status The Status pane appears 196 Copyright 2013 Juniper Networks Inc ACP CLI Component Date Disk Interfaces Iptables NIC Redirect Server 2007 Juniper Networks Inc All Rights Reserved Trademark Notice Privacy Chapter 20 Monitoring NTP C Web Interface Configure Diagnose Manage Logged in as NTP Status No Resolve M OK Reset admin Refresh Preferences About Logout eu niper AUNE 2 To suppress symbolic addressing select the No Resolve box 3 Click OK The Status pane displays NTP status Related Viewing NTP Peers SRC CLI on page 191 Documentation e Viewing Internal Variables for NTP SRC CLI on page 192 Viewing Statistics for NTP SRC CLI on page 192 Viewing NTP
137. ction user host gt show nic statistics host Component Statistics Component Name hosts Number of Components Restart 0 Number of No Match Resolutions 0 Number of Resolution Errors 0 Number of Resolutions 0 Meaning Table 29 on page 177 describes the output fields for the show nic statistics host Command Output fields are listed in the order in which they appear Table 29 Output Fields for show nic statistics test Field Name Field Description Component name Name of component hosts indicates NIC host A specific host has the format hosts hostname Number of Number of NIC resolvers and agents that have restarted in the host Components Restart Number of NoMatch Number of resolution requests that did not return data Resolutions Number of Resolution Number of errors encountered when processing resolutions requests Errors Number of Number of successful data resolutions for example the SAE reference Resolutions for a specified IP address the login name for a specified IP address or the SAE reference for a specified login name Related Configuring the NIC SRC CLI Documentation Viewing Host Statistics C Web Interface on page 185 e Viewing Statistics for the NIC Process SRC CLI on page 176 Viewing Statistics for NIC Resolvers SRC CLI on page 177 e Viewing Statistics for NIC Agents SRC CLI on page 179 Viewing Statistics for NIC Resolvers SRC CLI Purpose View statistics for NIC resol
138. cumentation Viewing Information About System Disk Status C Web Interface Purpose View information about the system disk status Action 1 Click Monitor gt Disk gt Status The Status pane appears Diagnose Disk Status D Brief Display summary information OK Reset j 2 To display a summary of the system disk status select the Brief check box 3 Click OK The Status pane displays the system disk status Related Viewing Information About a C Series Controller SRC CLI on page 109 Documentation Viewing Information About the System C Web Interface on page 115 e Viewing Information About Boot Messages C Web Interface on page 117 Viewing Information About the Users on the System C Web Interface Purpose View information about the users on the system Action 1 Click Monitor gt System gt Users The Users pane appears Copyright O 2013 Juniper Networks Inc 119 SRC 4 6 x Monitoring and Troubleshooting Guide Related Documentation sleswayball Update Preferences About Logout Configure Diagnose Manage Logged in as System Users Component Date Brief M Use the short format Disk gt Nofrom Do not show the FROM field root pts 4 telnet menemsha pts 8 3 40 bash pts 10 12 python 0 fopt UMC cli lib te cl pts 3 3 38 telnet menemsha HEC DE AS 7 Juniper Networks Inc All Rights Reserved Trademark Notice Privacy 2 To display asumm
139. directory connections 4 Select an output style from the Style list 5 Click OK The Statistics Connections pane displays statistics for directory connections Related Configuring SAE Properties for Global Default SNMP Communities for Use with JunosE Documentation Routers and Devices Running Junos OS Viewing Statistics for Directory Connections SRC CLI on page 140 Viewing Statistics About the Directory SRC CLI on page 140 Viewing SNMP Statistics for the Directory C Web Interface on page 163 Viewing SNMP Statistics for Client Licenses C Web Interface Purpose View SNMP statistics for client licenses Action 1 Click Monitor gt SAE gt Statistics gt License gt Client The Statistics License Client pane appears Copyright 2013 Juniper Networks Inc 165 SRC 4 6 x Monitoring and Troubleshooting Guide Configure Diagnose Manage Logged in as admin Refresh Preferences About Logout ACP SAE cu Statistics License Client Component Display SAE information for a specified slot Date Slot Value Currently the chassis has only one slot The valid value is 0 Disk Default 0 Interfaces m Reset t 2007 Juniper Networks Inc AI Rights Reserved Trademark Notice Privac Juniper oo Net 2 Inthe Slot box enter the number of the slot for which you want to display SNMP statistics for client licenses 3 Click OK The Statistics License Client pane displays statistics for client licenses Related
140. e Purpose Action 160 View information about subscriber sessions by login name 1 Click Monitor gt SAE gt Subscribers gt Login Name The Subscribers Login Name pane appears Configure Diagnose Manage Logged in as admin Refresh Preferences About Logout SAE Subscribers Login Name Component Login name of subscriber sessions Data Login Name Value All or part of the subscriber login name Disk Default No value Number of results to be displayed inertie Maximum Results Legal range 1 INF Default 25 Display subscriber sessions and service sessions for hidden services Se o Default Disabled Display SAE information for a specified slot Slot Value Currently the chassis has only one slot The valid value is 0 Default 0 Output style Choices Style E brief Display only subscriber sessions terse Display subscriber session ID login name and IP address Default Detail On Reset 7 J ights Reserved Trademark Notice Privacy sun per pourvet In the Login Name box enter a full or partial login name for which you want to display information or leave the box blank to display all subscriber sessions In the Maximum Results box enter the maximum number of results that you want to receive Select the Secret check box to set a flag indicating that subscriptions and service sessions from hidden services are displayed In the Slot box enter the number of the slot for which you want to display subscribe
141. e 56 Copyright O 2013 Juniper Networks Inc CHAPTER 8 Creating Custom SNMP Monitors SNMP Monitoring on C Series Controllers on page 57 Configuration Statements for Customized SRC SNMP Monitors on page 59 Configuring an SNMP Alarm on aC Series Controller SRC CLI on page 60 Defining an Alarm for an SNMP Monitor That Compares Object Values SRC CLI on page 61 Defining an Alarm to Monitor the Status of an Object SRC CLI on page 62 Defining an Alarm for an SNMP Monitor That Compares Values Against Thresholds SRC CLI on page 63 e Defining a Discontinuity Check to Validate Delta Values SRC CLI on page 63 Configuring an SNMPv3 Security Name for SNMP Monitoring SRC CLI on page 64 Defining Events for Which SNMP Sends Notifications SRC CLI on page 64 Defining Events That Set Values for SNMP MIB Objects SRC CLI on page 65 Example SNMP Monitoring of Multiple MIB Objects on page 66 SNMP Monitoring on C Series Controllers You can create custom SNMP monitors to detect changes in MIB objects Use custom monitors to generate an alarm and take action in response to an alarm To configure a monitor you define a condition that when met generates an SNMP notification You can define a monitor for any single MIB object of type integer supported onaC Series Controller These MIBs include Juniper Networks enterprise specific objects as well as standard MIB objects You can configure the following for
142. e number of unprocessed incoming router messages is D This L the threshold of T messages A routerJobQAge 194 S SAE Router Driver 30000 10000 5000 60 AV juniSaeRouterClientld The oldest unprocessed router message has been waiting for Dms This L the threshold of Tms A routerAvgAddTime 195 S SAE Router Driver 1000 500 100 60 R juniSaeRouterClientid During the last Ps the average time in milliseconds this router driver spent handling object added notifications is Dms This L the threshold of Tms A 92 Copyright 2013 Juniper Networks Inc Chapter 11 Understanding Traps Table 16 Performance Traps Router Drivers continued Trap Event routerAvgChgTime 196 Alarm Threshold Levels default values Text Displayed Critical Major EAE S SAE Router Driver 1000 500 100 60 R juniSaeRouterClientid During the last polling interval the average time in milliseconds this router driver spent handling object changed notifications is Dms This L the threshold of Tms A routerAvgDelTime 197 Copyright 2013 Juniper Networks Inc S SAE Router Driver 1000 500 100 60 R juniSaeRouterClientid During the last polling interval the average time in milliseconds this router driver spent handling object deleted notifications is Dms This L the threshold of Tms A 93 SRC 4 6 x Monitoring and Troubleshooting Guide Related Performance
143. e emai lweb ou entjunos o Policies o UMC servicename Emai 1AndWeb servicetype 7 sspcategory basicFirewal 1 sspradiusclass Emai1lAndWeb ssptype Normal status 2 available true description This firewall blocks all incoming traffic and allows only outgoing email and web traffic location entjunosstatelessfw o scopes o umc policygroupref policyGroupName emai lweb ou entjunos_statelessfw o Policies o UMC servicename Emai 1AndWeb servicetype 7 sspcategory basicFirewal1 sspradiusclass Emai1lAndWeb ssptype Normal status 2 Service available true This service is activated automatically when the description subscriber is the source or destination of a network attack location 1 idp subscriber o scopes o umc parametersubstitution captiveAddress 66 13 2 11 policygroupref policyGroupName quarantine ou idp o Policies o UMC servicename Quarantine servicetype 7 sspradiusclass Quarantine ssptype Normal status 2 Copyright 2013 Juniper Networks Inc Chapter 15 Monitoring SAE Data SRC CLI To view only the service names for the services user host gt show sae services brief Services Emai 1AndWeb Quarantine Audio Silver Internet Gold Internet Silver DynSrcNat FWR Filter Out StaticDestNat PingDoSProtect MirrorFragment SubrIntfFragment Brickwall Audio Bronze Internet Bronze Limit500kbs News Gold VPN LimitiMbs Video Silver Audio Gold RouterFragment 1 0 Mbps DynSrcNat FWR Filter
144. e licenses SSC License Key Checker V3 0 Type of license Pilot Status OK The following valid licenses are found License cn 83ced779 ou Licenses o Management o UMC license val component 1 license val customer buffy license val expiry 2007 02 23 license val nodeid 83ced779 license val release 7 license val seqnum 00555 license val type pilot license val userSessions 100 Related Obtaining an SRC License D tati ocumentation e Viewing Information About Licenses C Web Interface on page 151 e Viewing Information About Policies on the SAE SRC CLI on page 127 Viewing Information About Policies on the SAE SRC CLI Purpose View policy information Action To view information about the policies available on the SAE user host gt show sae policies To view information about particular policies specify all or part of the policy list name user host gt show sae policies filter filter For example if you wanted to view the policy called brickwall user host gt show sae policies filter brickwall Policy Group Policy Group Name brickwall Absolute ID policyGroupName brickwall ou entjunos o Policies o UMC Policy Object applicability both Name both policyRoles Junos accountingRule false Name block priority 601 ruleType Junos OS ASP matchDirection both Name all Name drop Name packet To view only the policy list names for the policies user host gt show sae policies brief Copyright
145. ed for variables that are gauges Configuration MIBs The SRC software has a limited number of MIB variables that can be set such as variables to shut down or start components MIB Structure The SNMP agent MIB uses the following Juniper Networks MIBs Juniper SDX ACP MIB SRC ACP MIB Juniper SDX CHASSIS M IB Chassis MIB for C Series Controllers Juniper SDX DES MIB Directory eventing system MIB Juniper SDX GW MIB Gateway applications MIB includes the NIC MIB Juniper SDX JPS MIB JPS MIB Juniper SDX LICENSE MIB Licensing MIB Juniper SDX MIB Main Juniper Networks SDX MIB Juniper SDX MIBS Collection of Juniper Networks SDX MIB modules Juniper SDX POM MIB Policy management MIB Juniper SDX REDIRECTOR MIB Redirector MIB Juniper SDX SAE MIB SAE MIB Juniper SDX TC MIB Textual conventions MIB Juniper SDX TRAP MIB SRC trap definition MIB Juniper UNI SMI Base SMI MIB MIB Location The MIBs are located on the Juniper Networks Web site at http www juniper net techpubs software management src Traps are individual events that the SNMP agent can monitor such as the number of timeouts or errors that have occurred or connections that have opened or closed There are two types of traps Performance traps Traps that poll MIB variables associated with the trap to determine whether a variable has crossed configured thresholds If the variable crosses a threshold an alarm is
146. eekly or monthly Logrotate can also be used to compress log files Logrotate usually runs automatically through the Cron utility When anew log file is opened to replace an older log file that contains content a number is appended to the name of the older file For example sae_debug log 4 is an older log file than sae_debug log whereas sae_debug log is the active log file for SAE On C Series Controllers the software compresses log files and appends the gz suffix for example sae_debug log 4 gz Log files are stored in the opt UMC component name var log directory for example opt UMC sae var log You can configure components to send log messages to the system log server on the platform on which the SRC software is running If you plan to filter log messages you should be familiar with severity levels and filters for logging before you configure system logging for a component Configuration Overview You can specify any number of log rotation configuration files on the command line Configuration options that you specify for a group of log files are considered local options and they override global options of the same name Both global and local options can be set in the etc logrotate conf file You set global options under the edit system logrotate logrotate conf hierarchy level You set local options for specific logging configuration files such as the var log wtmp file under the edit system logrotate logrotate conf logfiles
147. em C Web Interface 0 0 cece ee eee 115 Monitoring SAE Data SRC CLI 23 se SEKTEN EDER ERE 123 Monitoring SAE Data C Web Interface ccc cece eee 149 Monitoring and Troubleshooting the NIC SRC CLI 000 eee 175 Monitoring the NIC C Web Interface 0 0 c cece eee eee 185 Monitoring NTP SRC CLI cant caniietensebscatienitachbwwwenetounss 191 Monitoring NTP C Web Interface 0 0 cece cee nee eee 195 Copyright 2013 Juniper Networks Inc iii SRC 4 6 x Monitoring and Troubleshooting Guide Chapter 21 Chapter 22 Chapter 23 Chapter 24 Chapter 25 Part 6 Monitoring Redirect Server SRC CLI 00 cece eee 199 Monitoring the Redirect Server and Filtered Traffic C Web Interface 201 Troubleshooting Network Connectivity SRC CLI 0000 203 Monitoring Network Connectivity C Web Interface 207 Monitoring Activity for SRC Components 00cce cece eee e ees 209 Index NAE siicai eames wee cedi wher even ee ewe neta sane bene reine ees 219 Copyright 2013 Juniper Networks Inc Table of Contents Part 1 Chapter 1 Part 2 Chapter 2 Chapter 3 Copyright 2013 Juniper Networks Inc About the Documentation 005 005 ss 088s se beeen FARER EEEE Ener XV SRC Documentation and Release NoteS 0000 c cece eee XV AUIGIENCE eeren caw endapie cee Se Ss ce ced okde AE REE eee eee XV Documentation Conventions 0 0 eee eens
148. erface description gt lt nas port id nas port id gt To log in a simulated IPv4 authenticated DHCP subscriber 1 Issue the request sae login ipv4 authenticated dhcp command Specify the virtual router address login name and mac address options user host gt request sae login ipv4 authenticated dhcp virtual router virtual router address address login name login name mac address mac address 2 Optional To specify the service bundle used when logging in the simulated subscriber use the service bundle option 48 Copyright 2013 Juniper Networks Inc Chapter 7 Using Simulated Subscribers for Testing SRC CLI Optional To specify the RADIUS class used when logging in the simulated subscriber use the radius class option Optional To specify the virtual interface used when logging in the simulated subscriber use the interface name option Optional To specify the interface description used when logging in the simulated subscriber use the interface alias option If you are simulating JunosE routers the interface alias is the description that is configured on JunosE routers with the interface description command Optional To specify the alternate interface name used when logging in the simulated subscriber use the interface description option Optional To specify the port identifier of an interface used when logging in the simulated subscriber use the nas port id option Logging In Authenticated Interface
149. erity level as follows e Specify an explicit severity For example debug Defines only debug messages Specify a minimum severity and a maximum severity For example info warning Defines messages of minimum severity level of info and a maximum severity level of warning Accept the default minimum logmin or maximum logmax severity by omitting the minimum or maximum severity For example info Defines messages of minimum severity level info and maximum severity level logmax warning Defines messages of minimum severity level logmin and maximum severity level warning Specify no severities to log all event messages The syntax for the severity takes the format lt severity gt lt minimumSeverity gt lt maximumSeverity gt Use either the name or the number of a severity level shown in Table 4 on page 18 for the variables in this syntax Defining Filters You specify a filter by defining an expression with the following format singlematch singlematch singlematch lt category gt lt category gt lt severity gt lt minimumSeverity gt lt maximumSeverity gt Do not log matching events lt category gt See Defining Categories on page 8 lt severity gt lt minimumSeverity gt lt maximumSeverity gt See Defining Severity Levels on page 18 The software filters events by evaluating each subexpression in order from left to right
150. es Object Values SRC CLI You can configure a monitor to compare a sample value to a specified value or range of values by using one of the following types of comparisons equal unequal less less or equal greater greater or equal Before you define an alarm type configure the associated SNMP alarm See Configuring an SNMP Alarm on aC Series Controller SRC CLI on page 60 To configure a monitor to compare a sample to a specified value or range of values 1 From configuration mode access the configuration statements that configure SNMP monitoring for a Boolean test For example edit user host edit snmp monitor alarm saeHeapUsage boolean test where saeHeapUsage is the name of the alarm Copyright 2013 Juniper Networks Inc 61 SRC 4 6 x Monitoring and Troubleshooting Guide Related Documentation 2 Specify the type of Boolean test For example edit ssmp monitor alarm saeHeapUsage boolean test user host set comparison greater 3 Define the value that the test uses For example edit snmp monitor saeHeapUsage boolean test user host value 14000000 e Defining an Alarm to Monitor the Status of an Object SRC CLI on page 62 e Defining an Alarm for an SNMP Monitor That Compares Values Against Thresholds SRC CLI on page 63 Configuring an SNMP Alarm ona C Series Controller SRC CLI on page 60 e Configuration Statements for Customized SRC SNMP Monitors on page 59 SNMP Monitoring on
151. es Running Junos OS e Viewing SNMP Statistics for Specific Devices C Web Interface on page 172 e Viewing SNMP Statistics for Subscriber Sessions and Service Sessions C Web Interface on page 173 Viewing SNMP Statistics for Specific Devices C Web Interface Purpose 172 View SNMP statistics about specific devices Copyright 2013 Juniper Networks Inc Action Related Documentation Purpose Action 1 ACP CLI Component Date Disk Chapter 16 Monitoring SAE Data C Web Interface Click Monitor gt SAE gt Statistics gt Device gt Common The Statistics Device Common pane appears Configure Diagnose Manage Logged in as admin Refresh Preferences About Logout SAE Statistics Device Common Name of a device Value All or part of the device name For JUNOSe router drivers use the format inertes Device virtualRouterName routerName Name For JUNOS router drivers and PCMM drivers use the format default routerName Default No value Display SAE information for a specified slot Slot Value Currently the chassis has only one slot The valid value is 0 Default 0 Display SNMP statistics for a specified device driver type Choices junos Display SNMP statistics for JUNOS router drivers Type z junose cops Display SNMP statistics for JUNOSe router drivers packetcable cops Display SNMP statistics for PCMM device drivers proxy Display SNMP statistics for third party drivers Defa
152. ess delay compress copy daily weekly monthly rotate rotate size size no create copy truncate if empty missing ok filenames filenames shared scripts pre rotate pre rotate post rotate post rotate first action first action last action last action system logrotate file name logfiles name create default mode mode owner owner group group 3 system logrotate logrotate conf f compress delay compress copy daily weekly monthly rotate rotate size size 30 Copyright 2013 Juniper Networks Inc Chapter 3 Configuring Logging for SRC Components with the CLI no create copy truncate if empty missing ok 3 system logrotate logrotate conf create f default mode mode owner owner group group 3 system logrotate logrotate conf logfiles name compress delay compress copy daily weekly monthly rotate rotate size size no create copy truncate if empty missing ok filenames filenames shared scripts pre rotate pre rotate post rotate post rotate first action first action last action last action 3 system logrotate logrotate conf logfiles name create f default mode mode owner owner group group 3 Related Logging for SRC Components Overview on page 7 Bocumentaton e Rotating Log Files on page 22 Configuring the Logrotate Utility SRC CLI on page 31 Configuring the Logrotate Utility SRC CLI Use the options described in Table 8 on page 32 to configure
153. essible by IP address 1 Issue the show sae subscribers ip command to view the subscribers who are accessible by IP address 2 Issue the request sae logout ip command to log out all subscribers who are accessible by IP address 3 To log out specific subscribers use the filter option and specify the IP address for the subscribers that you want to log out user host gt request sae logout ip filter filter 4 To specify that no confirmation is requested before the software logs out the subscribers use the force option user host gt request sae logout ip force user host gt request sae logout ip filter filter force 52 Copyright 2013 Juniper Networks Inc Chapter 7 Using Simulated Subscribers for Testing SRC CLI Logging Out Subscribers by Login Name To log out subscribers who are accessible by login name 1 3 Issue the show sae subscribers login name command to view the subscribers accessible by login name Issue the request sae logout login name command to log out all subscribers accessible by login name To log out specific subscribers use the filter option and specify all or part of the login name for the subscribers that you want to log out user host gt request sae logout login name filter filter To specify that no confirmation is requested before the software logs out the subscribers use the force option user host gt request sae logout login name force user host gt request sae logout login na
154. essions by DN 1 Click Monitor gt SAE gt Subscribers gt DN The Subscribers DN pane appears Configure Diagnose Manage Logged in as admin Refresh Preferences About Logout SAE Subscribers DN Component DN of the subscribers LE Subscriber DN Value All or part of the subscriber DN Disk Default No value Number of results to be displayed interferens Maximum Results Legal range 1 INF Iptables Default 25 JPS Display subscriber sessions and service sessions for hidden services SEE o Default Disabled Display SAE information for a specified slot Slot Value Currently the chassis has only one slot The valid value is 0 Redirect Server paraan Output style Routo Choices Style X brief Display only subscriber sessions terse Display subscriber session ID login name and IP address Default Detail OK rese 7 Juniper Networks Inc AllRights Reserved Trademark Notice Privacy Juniper type 2 Inthe Subscriber DN box enter a full or partial subscriber DN for which you want to display information or leave the box blank to display all subscriber sessions 3 Inthe Maximum Results box enter the maximum number of results that you want to receive 4 Select the Secret check box to set a flag indicating that subscriptions and service sessions from hidden services are displayed 5 In the Slot box enter the number of the slot for which you want to display subscriber session information 6 Select an
155. ewing Information About Subscriber Sessions by IP Address VPN Identifier or both SRC CLI on page 134 Viewing Information About Subscriber Sessions by Session ID SRC CLI on page 137 Copyright 2013 Juniper Networks Inc Chapter 15 Monitoring SAE Data SRC CLI Viewing Information About Subscriber Sessions by Session ID SRC CLI Purpose Action Related Documentation View information about subscriber sessions by the session ID associated with the subscriber session You can view all or restricted information about all associated subscriber sessions To view information about subscriber sessions by session ID user host gt show sae subscribers session id To view information about particular subscriber sessions specify all or part of the subscriber session ID user host gt show sae subscribers session id filter filter To view the subscriptions and service sessions from hidden services user host gt show sae subscribers session id secret user host gt show sae subscribers session id filter filter secret To view only the subscriber session information without service sessions user host gt show sae subscribers session id brief user host gt show sae subscribers session id filter filter brief To view the subscriber session ID login name and IP address user host gt show sae subscribers session id terse user host gt show sae subscribers session id filter filter terse To restrict the number of displayed
156. ewing Statistics for Directory Connections SRC CLI on page 140 Viewing Statistics About the Directory SRC CLI on page 140 Viewing SNMP Statistics for Directory Connections C Web Interface on page 164 Viewing SNMP Statistics for Directory Connections C Web Interface Purpose View SNMP statistics for directory connections 164 Copyright 2013 Juniper Networks Inc Chapter 16 Monitoring SAE Data C Web Interface Action 1 Click Monitor gt SAE gt Statistics gt Directory gt Connections The Statistics Directory Connections pane appears Configure Diagnose Manage Logged in as admin Refresh Preferences About Logout Statistics Directory Connections Component z Directory connection ID Date Connection ID Value All or part of the connection ID Disk Default No value Display SAE information for a specified slot iMeriaces Slot Value Currently the chassis has only one slot The valid value is 0 iptables Default 0 JPS Output style Choices Style be brief Display only directory connection IDs Default Detail KE Reset 7 Juniper Networks Inc Al Rights Reserved Trademark Notice Privacy pun DSE Bose Mat 2 Inthe Connection ID box enter a full or partial connection ID for which you want to display information or leave the box blank to display all SNMP statistics for all directory connections 3 Inthe Slot box enter the number of the slot for which you want to display SNMP statistics for
157. exp msg Run the install sh script Use the pkgadd tool To cancel the configuration click Cancel Bold text like this Represents text that the user must type user host set cache entry age cache entry age Fixed width text like this Represents information as displayed on your terminal s screen such as CLI commands in output displays nic locators login resolution resolver name realms login A1 key type LoginName value type Saeld Regular sans serif typeface e Represents configuration statements e Indicates SRC CLI commands and options in text e Represents examples in procedures e Represents URLs system ldap server stand alone Use the request sae modify device failover command with the force option user host http www juniper net techpubs software management src api index html Italic sans serif typeface Represents variables in SRC CLI commands user host set local address local address Angle brackets In text descriptions indicate optional Another runtime variable is lt gfwif gt keywords or variables Key name Indicates the name of a key onthe keyboard Press Enter xvi Copyright 2013 Juniper Networks Inc Table 2 Text Conventions continued About the Documentation Key names linked with a plussign Indicates that you must press two or more keys simultaneously Press Ctrl b Italic typeface e Emphasizes
158. ey option under the shared sae configuration logger hierarchy level If you do not set the SAE severity level to debug but enable network device specific filtering then no information is logged in to the SAE debug log file When using network device specific filtering you can add one or more device filters by using an expression that defines certain criteria Only log events matching the criteria are logged in the SAE debug log file Events that do not match the criteria are not logged in the SAE debug log file NOTE SRC network device specific filtering for SAE debug logs is supported on JunosE COPS and Junos OS JSRC devices If the network device specific debug log filtering is not enabled the SAE debug logger displays its default behavior By default log events that match the subexpression defined by using the filter option are logged You can configure network device specific debug log filtering by defining an expression with the following format deviceFilter deviceFilter deviceFilter OpenQuotes deviceFilterKey CloseQuotes deviceFilterKey SingleDevKey Operands SingleDevKey SingleDevKey varName Equality valName Copyright 2013 Juniper Networks Inc Chapter 2 Configuring Logging for SRC Components varName router name or interface name or login name AlphaNumeric x41 5A x61 7A x30 39 x2A valName 1 AlphaNumeric Equality or Ope
159. face on page 37 Configuring the SAE to Store Log Messages in a File C Web Interface on page 38 Configuring NIC to Store Log Messages in a File C Web Interface on page 38 Configuring the SNMP to Store Log Messages in a File C Web Interface on page 39 Copyright 2013 Juniper Networks Inc PART 3 Using Simulated Router Drivers and Simulated Subscribers for Testing Configuring a Simulated Router Driver for Testing SRC CLI on page 43 Configuring a Simulated Router Driver for Testing C Web Interface on page 45 Using Simulated Subscribers for Testing SRC CLI on page 47 Copyright 2013 Juniper Networks Inc 41 SRC 4 6 x Monitoring and Troubleshooting Guide 42 Copyright O 2013 Juniper Networks Inc CHAPTER 5 Configuring a Simulated Router Driver for Testing SRC CLI Simulated Router Drivers for the SRC Software Overview on page 43 Configuring Simulated Router Drivers SRC CLI on page 43 Simulated Router Drivers for the SRC Software Overview Related Documentation Simulated router drivers allow you to create subscriber sessions without connecting to a router You can then use the simulated subscriber sessions to test SAE applications The SRC software has a default simulated router driver instance called default simJunos Configuring Simulated Router Drivers SRC CLI on page 43 Configuring a Simulated Router Driver for Testing C Web Interface on page 45 Configuring Sim
160. facturer Juniper Networks Product Name SDX 2000 Version 1 0 Serial Number 0207082006000003 UUID 48384441 5254 0030 4859 003048595D02 Hostid e30a2f07 Software version SDX 300 Release A MAIN 110 January 22 2007 02 20 System Time Current time 2007 08 24 14 07 16 EDT 76 days 18 35 Number of active users 3 Load Averages 1m Sm 15m 0 27 0 06 0 02 Uptime Memory Total 15G Free 13G CPU Info Number of CPU 4 CPU Model Dual Core AMD Opteron tm Processor 265 About Logout Information For information about configuring C Series Controllers see the SRC PE C Web Interface Configuration Guide Viewing Information About a C Series Controller SRC CLI on page 109 Viewing Information About Boot Messages C Web Interface on page 117 e Viewing Information About System Disk Status C Web Interface on page 119 Viewing the System Date and Time C Web Interface Purpose Action 116 View the system date and time Click Monitor gt Date The Date pane displays the date and time of the system Configure ner Date CLI Component Diagnose Manage Logged in as admin Refresh Preferences Disk Interfaces iptables riper Networks Inc Juniper rend Net About Logout Fri Aug 24 14 09 07 EDT 2007 Copyright 2013 Juniper Networks Inc Chapter 14 Monitoring the System C Web Interface Related Setting the Time Zone SRC CLI Documentation Setting the System Date SRC CLI
161. g IOR 000000000000003549444C3A736D67742E6A756E697065722E6E65742F7361652F53657276696365 41637469766174696F6E456E67696E653A312E300000000000000002000000000000007800010200 0000000C31302E3232372E362E34330022610000000000226761726B6269742E6B616E6C61622E6A 6E70722E6E65742F736165504F412F5341450000000000020000000000000008000000004A414300 000000010000001C0000000000010001000000010501000100010109000000010501000100000001 0000002C0000000000000001000000010000001C0000000000010001000000010501000100010109 0000000105010001 Table 34 on page 183 describes the output fields for the show nic data agent command Output fields are listed in the order in which they appear Copyright 2013 Juniper Networks Inc Chapter 17 Monitoring and Troubleshooting the NIC SRC CLI Table 34 Output Fields for show nic data agent Field Name Field Description Component name Name of an agent Agent names have the format agents agent name Key Data type and value of a NIC key The value is the actual value of the NIC key not the NIC value to which the key maps Value Data type and value of the NIC value that maps to the associated NIC key Related Viewing Statistics for NIC Agents SRC CLI on page 179 Documentation e Viewing Agents C Web Interface on page 188 e Viewing Agent Statistics C Web Interface on page 189 Viewing Data for NIC Resolvers SRC CLI on page 180 Troubleshooting NIC Data Resolution SRC CLI Problem The NIC does not reso
162. g Resolvers C Web Interface on page 186 e Viewing Statistics for the NIC Process SRC CLI on page 176 e Viewing Statistics for NIC Agents SRC CLI on page 179 Copyright 2013 Juniper Networks Inc Chapter 17 Monitoring and Troubleshooting the NIC SRC CLI Viewing Statistics for NIC Agents SRC CLI Purpose To interpret the statistics for NIC agents make sure that you have a good understanding of the NIC agents See Mapping Subscribers to a Managing SAE View statistics for NIC agents Action user host gt show nic statistics agent Component Statistics Component Name agents LoginNameVr Agent Type Passive Connection to Data Source Up Data Size 262141 Component Statistics Component Name agents VrSaelId Agent Type Active Connection to Data Source Up Data Size 2212 Component Statistics Component Name agents IpLoginName Agent Type Passive Connection to Data Source Up Data Size 262141 Component Statistics Component Name agents Pool Agent Type Active Connection to Data Source Up Data Size 3 Meaning Table 31 on page 179 describes the output fields for the show nic statistics agent command Output fields are listed in the order in which they appear Table 31 Output Fields for show nic statistics agent Field Name Field Description Component name Name of an agent Agent names have the format agents agent name Agent Type Type of agent active or passive Active agents publish data whether or not a re
163. g Table 33 on page 181 describes the output fields for the show nic data resolver command Output fields are listed in the order in which they appear Table 33 Output Fields for show nic data resolver Field Name Field Description Component name Name of a resolver Resolver names have the format realms realm name resolver name Key Data type and value of a NIC key The value is the actual value of the NIC key not the NIC value to which the key maps Value Data type and value of the NIC value that maps to the associated NIC key Related Viewing Statistics for NIC Resolvers SRC CLI on page 177 Documentation Viewing Resolvers C Web Interface on page 186 e Viewing Resolver Statistics C Web Interface on page 187 e Viewing Data for NIC Agents SRC CLI on page 182 Copyright 2013 Juniper Networks Inc 181 SRC 4 6 x Monitoring and Troubleshooting Guide Viewing Data for NIC Agents SRC CLI 182 Purpose Action Meaning To interpret the data for agents make sure that you have a good understanding of the NIC resolution process See NIC Resolution Process Overview View all NIC resolver data user host gt show nic data agent Component name agents LoginNameVr Key Type Ip String 192 170 179 0 Value Type Vr String vorbis 13 prsim Key Type Ip String 192 170 179 3 Value Type Vr String vorbis 13 prsim Key Type Vr String default sys1 Value Type SaeId Strin
164. ge error debug UnsolicitedMsgFactory debug UnsolicitedTimeoutJob error debug UserLDAPDataManager info error debug UserLDAPDataManagerConnectionThread info error debug UserLdapListener debug Copyright 2013 Juniper Networks Inc 17 SRC 4 6 x Monitoring and Troubleshooting Guide Table 3 SAE Categories and Severity Levels continued Category Extension Severity Level UserManager error debug UserProfile error debug UserProfileManager debug UserRamCache debug UserSession info error debug WrapperServiceSession error debug Defining Severity Levels The event filter provides 128 levels of severity numbered 1 127 A higher number indicates a higher level of severity Common levels of severity also have a specific name as shown in Table 4 on page 18 A CAUTION Enabling the generation of debug log messages has a negative affect on system performance Do not enable debug log messages unless you are instructed to do so by Juniper Networks Technical Assistance Center JTAC Table 4 Named Severity Levels Name Severity Level logmin 1 debug 10 info 20 notice 30 warning 40 error 50 crit 60 alert 70 emerg 80 panic 90 18 Copyright 2013 Juniper Networks Inc Chapter 2 Configuring Logging for SRC Components Table 4 Named Severity Levels continued Name Severity Level logmax 127 You can define a sev
165. gory category name event event name To configure event traps 1 From configuration mode access the configuration statement that configures the type of event trap edit user host edit snmp notify 2 Specify the type of trap and the trap name edit snmp notify user host set event category category name event event name You can select from the list of trap types and their associated traps or create new traps Related Configuring Performance Traps SRC CLI on page 80 Documentation Configuration Statements for the SNMP Traps on page 79 Event Traps on page 97 SNMP Traps Overview on page 77 Copyright 2013 Juniper Networks Inc 81 SRC 4 6 x Monitoring and Troubleshooting Guide 82 Copyright 2013 Juniper Networks Inc CHAPTER 11 Understanding Traps Performance Traps on page 83 Trap Numbers in Performance Traps on page 84 Decoding Trap Numbers for Raised Trap Actions on page 85 Decoding Trap Numbers for Clear Trap Actions on page 85 SRC Performance Traps on page 86 Event Traps on page 97 Alarm State Transitions on page 100 Performance Traps Trap tables list all the traps supported by the SNMP agent the text displayed for each trap trap thresholds and intervals and any special notes pertaining to the trap Table 11 on page 83 describes the symbols used in the performance traps tables Table 11 Symbols in Performance Traps Tables Symbol Description
166. hassis has only one slot The valid value is 0 Default 0 Output style Choices Style E brief Display only subscriber sessions terse Display subscriber session ID login name and IP address Default Detail Ox Reset FSR IST ASER DE 7 Ie ights Reserved Trademark Notice Privacy In the Service Name box enter a full or partial service name for which you want to display information or leave the box blank to display all subscriber sessions In the Maximum Results box enter the maximum number of results that you want to receive Select the Secret check box to set a flag indicating that subscriptions and service sessions from hidden services are displayed In the Slot box enter the number of the slot for which you want to display subscriber session information Select an output style from the Style list Click OK The Subscribers Service Name pane displays information about subscriber sessions Copyright 2013 Juniper Networks Inc 161 SRC 4 6 x Monitoring and Troubleshooting Guide Related Documentation Configuring Access to Subscriber Data SRC CLI Viewing Information About Subscriber Sessions by DN C Web Interface on page 158 Viewing Information About Subscriber Sessions by IP Address C Web Interface on page 159 Viewing Information About Subscriber Sessions by Login Name C Web Interface on page 160 e Viewing Information About Subscriber Sessions by Session ID C Web Interface
167. he Create new list select Logger The name of the logger appears in the side pane and the Logger pane Expand the logger in the side pane and then click File or Syslog Click Create enter information as described in the Help text in the main pane and click Apply Configuring an SRC Component to Store Log Messages in a File SRC CLI on page 26 Configuring ACP to Store Log Messages in a File C Web Interface on page 37 Configuring the SAE to Store Log Messages in a File C Web Interface on page 38 Configuring NIC to Store Log Messages in a File C Web Interface on page 38 Configuring JPS to Store Log Messages in a File C Web Interface on page 39 Configuring JPS to Store Log Messages in a File C Web Interface To configure component logging for JPS Copyright 2013 Juniper Networks Inc 39 SRC 4 6 x Monitoring and Troubleshooting Guide 40 Related Documentation Click Configure expand Slot and then expand the slot for which you want to configure component logging Click JPS The JPS pane appears From the Create new list select Logger The name of the logger appears in the side pane and the Logger pane Expand the logger in the side pane and then click File or Syslog Click Create enter information as described in the Help text in the main pane and click Apply Configuring an SRC Component to Store Log Messages in a File SRC CLI on page 26 Configuring ACP to Store Log Messages in a File C Web Inter
168. he Route Information SRC CLI on page 204 Viewing Routing Table Information SRC CLI on page 205 Testing Connectivity to Remote Hosts SRC CLI on page 203 Commands to Troubleshoot Connections to Remote Hosts Overview on page 203 Copyright 2013 Juniper Networks Inc CHAPTER 24 Monitoring Network Connectivity C Web Interface e Viewing Information About the Routing Table C Web Interface on page 207 e Viewing Information About System Interfaces C Web Interface on page 208 Viewing Information About the Routing Table C Web Interface Purpose View information about the route from the local system to a remote host Action 1 Click Monitor gt Route The Route pane appears Configure Diagnose Manage Logged in as admin Refresh Preferences About Logout ac Route CLI Component Detail r Date Disk No Resolve M Interfaces Iptables E m JPS 307 Juniper Networks Inc Al Rights Reserved Trademark Notice Privacy E la 2 To suppress symbolic addressing select the No Resolve box 3 To display detailed output select the Detail box 4 Click OK The Route pane displays the information about the route Related Viewing Routing Table Information SRC CLI on page 205 Documentation Viewing Information About System Interfaces C Web Interface on page 208 Copyright 2013 Juniper Networks Inc 207 SRC 4 6 x Monitoring and Troubleshooting Guide Viewing Information About System Interfaces C We
169. he configuration statement that configures the logging destination for the component For example edit user host component hierarchy logger name syslog For example edit user host edit shared sae configuration logger sae sys 1 syslog 28 Copyright 2013 Juniper Networks Inc Chapter 3 Configuring Logging for SRC Components with the CLI edit user host edit snmp agent logger snmp sys 1 syslog edit user host edit slot O jps logger jps sys 1 syslog 2 Optional Specify the filter to define which event messages the software logs or disregards edit shared sae configuration logger sae sys 1 syslog user host set filter filter Filters can specify the logging level such as debug or can specify expressions 3 Optional Change the IP address or name of a host that collects event messages by means of a standard system logging daemon edit shared sae configuration logger sae sys 1 syslog user host set host host By default the host is loghost for the system log server on the local host Configuration in the etc hosts file sets loghost to localhost Make sure that the user under which the J2EE application server or Web application server runs has write access to this folder If this user does not have write access to the default folder configure the component or application to write logs in folders to which the user has write access 4 Optional Specify the type of system log in accordance with the
170. he percentage of bandwidth in use out of the total bandwidth of the congestion point e MINOR ACP acpCPUsed of congestion point is in use This exceeded the threshold of THRESHOLD RAISE where acoCPUsed is the percentage of bandwidth in use out of the total bandwidth of the congestion point When the trap is cleared the text displayed is e CLEAR ACP acpCPUsed of congestion point is in use This is below the threshold of THRESHOLD CLEAR where acoCPUsed is the percentage of bandwidth in use out of the total bandwidth of the congestion point jpsAmConnUp 260 NFORMATION JPS A new application manager connection was established RAISE jpsAmConnDown 261 NFORMATION JPS The application manager connection went down RAISE jpsCmtsConnUp 262 NFORMATION JPS A new CMTS connection was established RAISE jpsCmtsConnDown 263 NFORMATION JPS A CMTS connection went down RAISE jdbReplicationFailure 292 When the trap is raised the text displayed is e INFORMATION jdbReplicationFailure Failed to replicate LDAP data juniSdxJdbReplicationDirection neighbor juniSdxJdbNeighbor The latest JDB replicaiton status is juniSdxJdbLastStatus RAISE When the trap is cleared the text displayed is e INFORMATION jdbReplicationFailure Community directory server juniSdxJdbNeighbor latest update status error CLEAR systemOperatingFailure 300 When the trap is raised the text displayed is e INFORM
171. hout service sessions user host gt show sae subscribers brief To view the subscriber session ID login name and IP address user host gt show sae subscribers terse To restrict the number of displayed results user host gt show sae subscribers maximum results maximum results Configuring Access to Subscriber Data SRC CLI e Viewing Information About Subscriber Sessions by DN SRC CLI on page 133 e Viewing Information About Subscriber Sessions by IP Address VPN Identifier or both SRC CLI on page 134 e Viewing Information About Subscriber Sessions by Service Name SRC CLI on page 136 Viewing Information About Subscriber Sessions by Session ID SRC CLI on page 137 e Viewing Information About Subscriber Sessions by Accounting User Identifier SRC CLI on page 137 Viewing Information About Subscriber Sessions by DN SRC CLI Purpose Action View information about subscriber sessions by the DN associated with the subscriber session You can view all or restricted information about all associated subscriber sessions To view information about subscriber sessions accessible by DN user host gt show sae subscribers dn To view information about particular subscriber sessions specify all or part of the DN user host gt show sae subscribers dn filter filter To view the subscriptions and service sessions from hidden services user host gt show sae subscribers dn secret user host gt show sae subscribers
172. ices Style HH brief Display only MAC address of registered equipment Default Detail ox Reset j In the MAC Address box enter a MAC address that specifies the equipment registrations that you want to display Use the format XX XX XX XX XX XX In the Maximum Results box enter the maximum number of results that you want to receive In the Slot box enter the number of the slot for which you want to display equipment registration information Select an output style from the Style list Click OK The Registered Equipment pane displays information about the equipment registrations For information about login and equipment registrations see the SRC PE Sample Applications Guide Related Documentation Removing Login Registrations C Web Interface Removing Equipment Registrations C Web Interface Viewing Login Registrations SRC CLI on page 128 Viewing Login Registrations C Web Interface on page 155 Viewing Login Registrations C Web Interface Purpose You can view all login registrations or you can view a specific registration Action To view information about login registrations Copyright 2013 Juniper Networks Inc 155 SRC 4 6 x Monitoring and Troubles 1 hooting Guide Click Monitor gt SAE gt Registered gt Login The Registered Login pane appears Configure Diagnose Manage Logged in as admin Refresh Preferences About Logout Registered Login Component Dats Mac Add
173. iew information about services available on the SAE You can view information about all services or about specific services Action To view information about the services available on the SAE user host gt show sae services To view information about particular services specify all or part of the service name user Ghost gt show sae services filter filter For example if you wanted to view the service called BrickWall user host gt show sae services filter brickwall Service Copyright 2013 Juniper Networks Inc 129 SRC 4 6 x Monitoring and Troubleshooting Guide 130 available true description This firewall blocks all incoming and outgoing traffic location entjunos o scopes o umc policygroupref policyGroupName brickwall ou entjunos o Policies o UMC servicename BrickWal servicetype 7 sspcategory basicFirewal1 ssptype Normal status 2 available true description This firewall blocks all incoming and outgoing traffic location l entjunosstatelessfw o scopes o umc policygroupref policyGroupName brickwal1 ou entjunos_statelessfw o Policies o UMC servicename BrickWal1 servicetype 7 sspcategory basicFirewal 1 ssptype Normal status 2 To view all the hidden services user host gt show sae services secret Service available true description This firewall blocks all incoming traffic and allows only outgoing email and web traffic location entjunos o scopes o umc policygroupref policyGroupNam
174. iewing Information About the System C Web Interface on page 115 Viewing the System Date and Time C Web Interface on page 116 Viewing Information About Components Installed C Web Interface on page 117 Viewing Information About Boot Messages C Web Interface on page 117 Viewing Information About Security Certificates C Web Interface on page 118 Viewing Information About System Disk Status C Web Interface on page 119 Viewing Information About the Users on the System C Web Interface on page 119 Viewing Information About the Juniper Networks Database in Community Mode C Web Interface on page 120 Viewing Statistics for the Juniper Networks Database C Web Interface on page 121 Viewing Information About the SRC CLI C Web Interface on page 121 Viewing Information About the System C Web Interface Purpose View system information You can view information about the SRC software including system identification and the system time You can also view information about the environment of the C Series Controller including memory temperature and fan speeds Copyright O 2013 Juniper Networks Inc 115 SRC 4 6 x Monitoring and Troubleshooting Guide Action Related Documentation Click Monitor gt System gt Information The Information pane displays the system information Configure Diagnose Manage Refresh Preferences Component Date Disk System Identification Hostname gaspode Manu
175. ify the name of the event to be generated in response to an alarm condition For example edit snmp monitor alarm saeHeapUsage user host set event saeHeapUsageEvent Specify the name or object identifier OID of the MIB variable to be monitored For example edit snmp monitor alarm saeHeapUsage user host set variable juniSdxSaeHeapUsed O Optional Specify whether to monitor the SNMP object instance identified by a variable attribute To monitor the SNMP object instance specified by the variable attribute Copyright 2013 Juniper Networks Inc Related Documentation Chapter 8 Creating Custom SNMP Monitors edit snmp monitor alarm saeHeapUsage user host set strict oid Do not enable the strict oid option when you monitor a column of an SNMP MIB table An alarm for a column monitors the column on all entries of the table If an entry for an object in the column passes an alarm test an event is generated for that object Configure a Boolean existence or threshold test for the alarm Defining an Alarm for an SNMP Monitor That Compares Object Values SRC CLI on page 61 Defining an Alarm to Monitor the Status of an Object SRC CLI on page 62 Defining an Alarm for an SNMP Monitor That Compares Values Against Thresholds SRC CLI on page 63 Configuration Statements for Customized SRC SNMP Monitors on page 59 SNMP Monitoring on C Series Controllers on page 57 Defining an Alarm for an SNMP Monitor That Compar
176. iieianhee 180 182 statistics viewing C Web iNterface ccccecsscssssessessssssessesssseseeseees 185 SRCE CUl ni na s 176 220 Notice ICONS kenn E ARAR RA XV NTP Network Time Protocol monitoring C Web INtCrfACO eceeecsessessessssessesssteseesssneseseeees 195 SRC CLI statistics viewing C Web iNterface cccccsssssssessesessesesseseseeseesees 196 SRG CHeran 192 P policies SNMP information viewing C Web interface 168 viewing on SAE C Web INterface cccceccesessssecsessesesteseesesssseseeees 151 SRG GL base asses testes aa essen 127 portals tOStING cc ceecsescssesessssssesesssssssssssessseseetsesseseeeesens 47 R RADIUS statistics SNMP information viewing C Web INterface cceeessssesssssssseseseeseeseeeseess 170 redirect server statistics viewing C Web INtErfACE eeescecsessessssessessestsseesesseeteseeseenes 201 SRG C Ei cece ar ASERNE REE REN 199 router interfaces viewing on SAE C Web INterface cecesesssessessessesssseeseeseesesees 153 SRE CUa a 126 routing table viewing C Web iNterf CEnsssnniinnnnnn 207 SRC CLI S SAE service activation engine configuration viewing SRC CO REE 123 directory blacklist viewing C Web INterface ccecessesessesessessesssesssenesseseees 149 SRG E E ER sn 123 SNMP information viewing SRG Celi E 139 SAE service activation engine configuring simulated router driver C WeD interface Ens 45 SRC CLI Copyright 2013 Juniper Networks
177. ing Junos OS and PCMM drivers use the format default routerName user host gt show sae statistics device filter filter To view only the RADIUS clients that were accessible by IP address and port number user host gt show sae statistics device brief Related Configuring SAE Properties for Global Default SNMP Communities for Use with JunosE Documentation Routers and Devices Running Junos OS e Viewing Statistics for Device Drivers SRC CLI on page 145 e Viewing SNMP Information for Licenses on Virtual Routers SRC CLI on page 142 Viewing Statistics for Specific Device Drivers SRC CLI on page 146 Viewing Statistics for Device Drivers SRC CLI Purpose View SNMP statistics for all device drivers Copyright 2013 Juniper Networks Inc 145 SRC 4 6 x Monitoring and Troubleshooting Guide Action Related Documentation user host gt show sae statistics device common SNMP Statistics Driver type JunosE COPS Number of close requests 0 Number of connections accepted 0 Number of current connections 0 Number of open requests 0 Server address 0 0 0 0 Server port 3288 Time since last redirect 0 SNMP Statistics Driver type PACKETCABLE COPS Number of close requests 0 Number of connections accepted 0 Number of current connections 0 Number of open requests 0 Server address 0 0 0 0 Server port 0 Time since last redirect 0 SNMP Statistics Driver type Junos Number of close requests 0 Number of connections accepted 0
178. ing Statistics for NIC Agents SRC CLI on page 179 190 Copyright 2013 Juniper Networks Inc CHAPTER 19 Monitoring NTP SRC CLI Viewing NTP Peers SRC CLI on page 191 e Viewing Statistics for NTP SRC CLI on page 192 e Viewing Internal Variables for NTP SRC CLI on page 192 Viewing NTP Peers SRC CLI Purpose View alist of NTP peers with the SRC CLI Action user host gt show ntp associations remote local st poll reach delay offset disp myserver jnpr n 192 0 7 46 3 1024 377 0 00038 0 000573 0 12178 Meaning Table 35 on page 191 describes the output fields for the show ntp associations command Output fields are listed in the approximate order in which they appear Table 35 Output Fields for show ntp associations command remote Address or name of the remote NTP peer local Address or name used by NTP on the local system st Stratum of the remote peer poll Polling interval in seconds reach Reachability register in octal delay Current estimated delay of the peer in milliseconds offset Current estimated offset of the peer in milliseconds disp Current estimated dispersion of the peer in milliseconds Related Configuring an NTP Peer ona C Series Controller SRC CLI Documentation e Viewing Statistics for NTP SRC CLI on page 192 Copyright O 2013 Juniper Networks Inc 191 SRC 4 6 x Monitoring and Troubleshooting Guide e Viewing Internal Variables for NTP SRC CLI on page 19
179. ion Viewing Information about Users Logged Into the SRC Software 122 Copyright 2013 Juniper Networks Inc CHAPTER 15 Monitoring SAE Data SRC CLI Viewing SAE Data with the CLI on page 123 Viewing Information About Subscriber Sessions SRC CLI on page 132 e Viewing SAE SNMP Information with the CLI on page 139 Viewing SAE Data with the CLI You can view information about the SAE active configuration for data currently stored in the SAE server s memory You can view SAE data by e Viewing Information About the Directory Blacklist SRC CLI on page 123 e Viewing Information About SAE Device Drivers SRC CLI on page 124 e Viewing the Synchronization Status of SAE Session Stores SRC CLI on page 125 Viewing Information About SAE Interfaces SRC CLI on page 126 e Viewing Information About SAE Licenses SRC CLI on page 126 Viewing Information About Policies on the SAE SRC CLI on page 127 e Viewing Login Registrations SRC CLI on page 128 e Viewing Equipment Registrations SRC CLI on page 129 e Viewing Information About Services SRC CLI on page 129 Viewing Information About Threads SRC CLI on page 132 Viewing Information About the Directory Blacklist SRC CLI Purpose View information about the directory blacklist configured on the SAE Action user host gt show sae directory black list Related Removing the Directory Blacklist C Web Interface Documentation Initially Configuring the
180. ion authentication Display RADIUS authentication client information Default No value IP address or addresses of RADIUS clients Ip Address Value All or part of the client IP address Default No value Display SAE information for a specified slot Slot Value Currently the chassis has only one slot The valid value is 0 Default 0 Output style Choices Sib H brief Display only clients accessible by IP address port number Default Detail Port number for RADIUS clients Udp Port Value All or part of the client port number Default No value Mandatory Bk Reset 2 Select a client type from the Client Type list accounting Displays RADIUS accounting information e authentication Displays RADIUS client authentication information 3 Inthe IP Address box enter the client IP address to display SNMP information for a specific RADIUS client or leave the box blank to display SNMP information for all RADIUS clients 4 Inthe Slot box enter the number of the slot for which you want to display SNMP statistics for RADIUS clients 5 Select an output style from the Style list 6 Inthe UDP Port box enter a port number to display SNMP information for a specific RADIUS client or leave the box blank to display SNMP information for all RADIUS clients 7 Click OK The Statistics RADIUS Client pane displays statistics for RADIUS clients Related Configuring SAE Properties for Global Default SNMP Commun
181. ion ID login name and IP address user host gt show sae subscribers ip terse user host gt show sae subscribers ip filter filter terse To restrict the number of displayed results user host gt show sae subscribers ip maximum results maximum results user host gt show sae subscribers ip filter filter maximum results maximum results Configuring Access to Subscriber Data SRC CLI e Viewing General Information About Subscriber Sessions SRC CLI on page 133 Viewing Information About Subscriber Sessions by DN SRC CLI on page 133 e Viewing Information About Subscriber Sessions by Service Name SRC CLI on page 136 Viewing Information About Subscriber Sessions by Session ID SRC CLI on page 137 e Viewing Information About Subscriber Sessions by Accounting User Identifier SRC CLI on page 137 Viewing Information About Subscriber Sessions by Login Name SRC CLI Purpose Action View information about subscriber sessions by the subscriber login name You can view all or restricted information about all associated subscriber sessions To view information about subscriber sessions accessible by login name user host gt show sae subscribers login name To view information about particular subscriber sessions specify all or part of the login name user host gt show sae subscribers login name filter filter To view the subscriptions and service sessions from hidden services user host gt show sae subscribers login name
182. ion is to raise the clear trap for all chassis sensors You cannot delete chassis alarms but you can disable them You can modify the time interval between which SNMP samples the value for the chassis alarms You can also define the alarm thresholds for each chassis alarm D NOTE If you want to use the built in chassis alarms you must delete any custom SNMP monitors that you configured to detect changes in the Juniper SDX CHASSIS TRAP MIB MIB objects To configure the chassis alarms you must set the editing level to expert Related Configuring SNMP Chassis Alarms SRC CLI on page 70 Documentation SNMP Monitoring on C Series Controllers on page 57 Copyright 2013 Juniper Networks Inc 69 SRC 4 6 x Monitoring and Troubleshooting Guide Configuring SNMP Chassis Alarms SRC CLI Related Documentation To configure SNMP chassis alarms 1 Set the editing level for the CLI to expert user host gt set cli level expert 2 From configuration mode access the configuration statement that configures the chassis alarms edit user host edit snmp monitor chassis alarm 3 Optional Disable all chassis alarms You cannot delete the chassis alarms edit snmp monitor chassis alarm user host set disable 4 Optional Specify the number of seconds between which SNMP samples the value of an object For example edit snmp monitor chassis alarm user host set interval 60 e Defining Alarm Thresholds for Battery Vo
183. ions continued Option Description copy truncate Optional When set this option copies the active log file toa backup and truncates the active log file Truncate the original log file in place after creating a copy instead of moving the old log file and optionally creating a new one This option is useful when programs cannot be instructed to close their log file and as a result may continue writing appending to the previous log file indefinitely NOTE There is a very small time period between copying the file and truncating it so some logging data might be lost When you specify this option the create option has no effect because the old log file stays in place if empty Optional Rotate the log file even if it is empty missing ok Optional If the log file is missing go on to the next log file without issuing an error message filenames filenames Optional Names of the log files to rotate Separate filenames with a space shared scripts Optional Normally the scripts you specify with the pre rotate and post rotate options are run for each log that is rotated and the absolute path to the log file is passed as the first argument to the script This means a single script may be run multiple times for log file entries that match multiple files If you specify the shared scripts option the scripts are run only once regardless of how many logs match the wildcard pattern and the entire pattern
184. ions for using this software are described in the software license contained in the acknowledgment to your purchase order or to the extent applicable to any reseller agreement or end user purchase agreement executed between you and Juniper Networks By using this software you indicate that you understand and agree to be bound by those terms and conditions Generally speaking the software license restricts the manner in which you are permitted to use the software and may contain prohibitions against certain uses The software license may state conditions under which the license is automatically terminated You should consult the license for further details For complete product documentation please see the Juniper Networks Web site at www juniper net techpubs END USER LICENSE AGREEMENT The Juniper Networks product that is the subject of this technical documentation consists of or is intended for use with Juniper Networks software Use of such software is subject to the terms and conditions of the End User License Agreement EULA posted at http www juniper net support eula html By downloading installing or using such software you agree to the terms and conditions of that EULA ii Copyright 2013 Juniper Networks Inc Part 1 Chapter 1 Part 2 Chapter 2 Chapter 3 Chapter 4 Part 3 Chapter 5 Chapter 6 Chapter 7 Part 4 Chapter 8 Chapter 9 Chapter 10 Chapter 11 Part 5 Chapter 12 Chapter 13 Chapter 14 Cha
185. is passed to them However if none of the logs in the pattern require rotating the scripts are not run at all If the scripts exit with an error the remaining actions are not executed for any log pre rotate pre rotate Optional The lines between the pre rotate and endscript both of which must appear on lines by themselves are executed using bin sh before the log file is rotated and only if the log is actually to be rotated These directives may appear only inside a log file definition Normally the absolute path to the log file is passed as the first argument to the script If the shared scripts option is specified the whole pattern is passed to the script post rotate post rotate Optional The lines between the post rotate and endscript both of which must appear on lines by themselves are executed using bin sh after the log file is rotated These directives may appear only inside a log file definition Normally the absolute path to the log file is passed as the first argument to the script If the shared scripts option is specified the entire pattern is passed to the script Copyright 2013 Juniper Networks Inc 33 SRC 4 6 x Monitoring and Troubleshooting Guide Table 8 Logrotate Options continued e a e a Description first action first action Optional The lines between first action and endscript both of which must appear on lines by themselves are executed using bin sh once before
186. isk Default 0 Interfaces SK Reset Juniper yout Not 2 Inthe Slot box enter the number of the slot for which you want to display SNMP statistics for local licenses 3 Click OK The Statistics License Local pane displays statistics for local licenses Configuring SAE Properties for Global Default SNMP Communities for Use with JunosE Routers and Devices Running Junos OS Viewing SNMP Information for Local Licenses SRC CLI on page 142 Viewing SNMP Information for Client Licenses SRC CLI on page 141 e Viewing SNMP Information for Licenses on Virtual Routers SRC CLI on page 142 e Viewing SNMP Statistics for Client Licenses C Web Interface on page 165 e Viewing SNMP Statistics for Licenses by Device C Web Interface on page 166 Viewing SNMP Statistics About Policies C Web Interface Purpose Action 168 View SNMP statistics about policies Click Monitor gt SAE gt Statistics gt Policy Management The Statistics Policy Management pane appears Copyright 2013 Juniper Networks Inc Chapter 16 Monitoring SAE Data C Web Interface Configure Diagnose Manage Logged in as admin Refresh Preferences About Logout Statistics Policy Management Component Dat Display SAE information for a specified slot 2 Slot Value Currently the chassis has only one slot The valid value is 0 Disk Default 0 Interfaces ol Reset iptables JPS OU LENS 1 Inthe Sl
187. ities for Use with JunosE Documentation Routers and Devices Running Junos OS Viewing SNMP Statistics About RADIUS C Web Interface on page 170 Viewing SNMP Statistics for Devices C Web Interface Purpose View SNMP statistics about devices Copyright 2013 Juniper Networks Inc 171 SRC 4 6 x Monitoring and Troubleshooting Guide Action Related Documentation Click Monitor gt SAE gt Statistics gt Device The Statistics Device pane appears SAE Device Name Statistics Device m Name of a device Value All or part of the device name e For JUNOSe router drivers use the format virtualRouterName routerName e For JUNOS router drivers and PCMM drivers use the format default routerName Default No value Display SAE information for a specified slot Value Currently the chassis has only one slot The valid value is 0 Default 0 Output style Choices brief Display only device names Default Detail Inthe Device Name box enter a full or partial device name for which you want to display information or leave the box blank to display all devices statistics for devices Click OK Select an output style from the Style list Inthe Slot box enter the number of the slot for which you want to display SNMP The Statistics Device pane displays statistics for all devices Configuring SAE Properties for Global Default SNMP Communities for Use with JunosE Routers and Devic
188. ketsDropped 28 S SAE RADIUS 30 20 10 60 AV Accounting Client During the last Ps D packets were dropped This L the threshold of T dropped packets A Related Performance Traps on page 83 D mentation ra Trap Numbers in Performance Traps on page 84 Copyright 2013 Juniper Networks Inc 89 SRC 4 6 x Monitoring and Troubleshooting Guide Configuring Performance Traps SRC CLI on page 80 Authentication Performance Traps Table 14 on page 90 lists the performance traps for authentication Table 14 Performance Traps Authentication Alarm Threshold Levels default values Trap Event Text Displayed Critical Major i Interval sec R AV saeAuthinvalidServerAddresses 40 S SAE RADIUS Authentication 10 5 1 60 AV Client During the last Ps D invalid server address errors occurred This L the threshold of T invalid server address errors A saeAuthRoundTripTime 41 S SAE RADIUS Authentication 2250 1500 750 60 R Client The round trip message time is Dms This L the threshold of Tms A saeAuthAccessRetransmissions 42 S SAE RADIUS Authentication 5 2 1 60 R Client During the last Ps D retransmissions occurred This L the threshold of T retransmissions A seeAuthMalformedAccessResponses 43 S SAE RADIUS Authentication 5 2 1 60 R Client During the last Ps D malformed responses occurred This L the threshold of T malformed responses A saeAuthBadAuthenticators 44 S SAE RADIU
189. le MIB Objects on page 66 Configuration Statements for Customized SRC SNMP Monitors on page 59 SNMP Monitoring on C Series Controllers on page 57 Example SNMP Monitoring of Multiple MIB Objects You can configure SNMP to monitor a column of a MIB table and configure SNMP notifications to include MIB objects located in the same row as the object that generates the event This example shows how to configure an alarm to generate an event in response to error conditions and send notifications that contain both the number of router errors and router timeouts This example uses the juniSaeRouterTable shown in Table 10 on page 66 SNMP monitors the juniSaeRouterMsgErrors branch and sends a notification object juniSdxMibs 24 2 1 for the objects in the same row as the object attached to the notification juniSaeRouterMsgTimeouts and juniSaeRouterMsgErrors The monitor generates an event named routerErrorEvent for the column juniSaeRouterMsgErrors Table 10 Example Table for junisaeRouterTable Object juniSaeRouterClinetid juniSaeRouterMsgErrors juniSaeRouterMsgTimeouts default amp routerl 100 5 default amp router2 Jil 9 default router3 52 2 The following example shows the configuration for this scenario snmp monitor alarm saeRouterErrors variable junisaeRouterMsgErrors strict oid event routerErrorEvent 3 event routerErrorEvent notification oid juniSdxMibs 24 2 1 wildcarded object junisaeRouterMsgErro
190. leshooting Network Connectivity SRC CLI e cena 203 Commands to Troubleshoot Connections to Remote Hosts Overview 203 Testing Connectivity to Remote Hosts SRC CLI 0 eee eee 203 Viewing the Route Information SRC CLI sm heks ENN eee 204 Viewing Routing Table Information SRC CLI 0 0 0 eee eee 205 Viewing Interface Information SRC CLI 0 0 eee 205 Copyright 2013 Juniper Networks Inc Chapter 24 Chapter 25 Part 6 Table of Contents Monitoring Network Connectivity C Web Interface 207 Viewing Information About the Routing Table C Web Interface 207 Viewing Information About System Interfaces C Web Interface 208 Monitoring Activity for SRC Components 00ce cece eee e ees 209 Monitoring Activity on C Series Controllers 2 eee 209 Collecting Data with the Activity Monitor SRC CLI 0 00 00 0 ee 210 Collecting Data with the Activity Monitor C Web Interface 211 Viewing Graphs C Web Interface 0 eee 212 Viewing Graphs from a Web Page ce cee eee 212 Viewing Graphs for a Preset Time Period from a Web Page 213 Viewing Graphs for Specified Time Periods from a Web Page 214 Index DAER se cas are craic ays hoe Gah ehete DAE ae dad Hl enuin ars Mapa Sab aed CG OBER 219 Copyright 2013 Juniper Networks Inc xi SRC 4 6 x Monitoring and Troubleshooting Guide
191. line or open a case with JTAC JTAC policies For a complete understanding of our JTAC procedures and policies review the JTAC User Guide located at http www juniper net us en local pdf resource guides 7100059 en pdf Product warranties For product warranty information visit http www juniper net support warranty JTAC hours of operation The JTAC centers have resources available 24 hours a day 7 days a week 365 days a year Copyright 2013 Juniper Networks Inc xvii SRC 4 6 x Monitoring and Troubleshooting Guide Self Help Online Tools and Resources For quick and easy problem resolution Juniper Networks has designed an online self service portal called the Customer Support Center CSC that provides you with the following features Find CSC offerings http www juniper net customers support Search for known bugs http Awww2 juniper net kb Find product documentation http www juniper net techpubs Find solutions and answer questions using our Knowledge Base http kb juniper net Download the latest versions of software and review release notes http www juniper net customers csc software Search technical bulletins for relevant hardware and software notifications https www juniper net alerts Join and participate in the Juniper Networks Community Forum http www juniper net company communities Open a case online in the CSC Case Management tool http www
192. lower threshold for the critical alarm For example edit snmp monitor chassis alarm cpu dimm voltage user host set below critical 2268 6 Optional Specify the upper threshold for the minor alarm For example edit snmp monitor chassis alarm cpu dimm voltage user host set over minor 2832 7 Optional Specify the upper threshold for the major alarm For example edit snmp monitor chassis alarm cpu dimm voltage user host set over major 2844 8 Optional Specify the upper threshold for the critical alarm For example edit snmp monitor chassis alarm cpu dimm voltage user host set over critical 2856 72 Copyright 2013 Juniper Networks Inc Chapter 9 Configuring SNMP Chassis Alarms Defining Alarm Thresholds for CPU Temperature Sensors To configure SNMP alarm thresholds for CPU temperature sensors 1 Set the editing level for the CLI to expert user host gt set cli level expert 2 From configuration mode access the configuration statement that defines the thresholds for the CPU temperature sensors edit user host edit snmp monitor chassis alarm cpu temperature 3 Optional Specify the upper threshold for the minor alarm For example edit snmp monitor chassis alarm cpu temperature user host set minor 76 4 Optional Specify the upper threshold for the major alarm For example edit snmp monitor chassis alarm cpu temperature user host set major 78 5 Optional Specify the upper thre
193. ltage Sensors on page 70 e Defining Alarm Thresholds for CPU Sensors on page 71 e Defining Alarm Thresholds for Fan Speed Sensors on page 73 e Defining Alarm Thresholds for System Temperature Sensors on page 74 SNMP Chassis Alarms on a C Series Controller on page 69 Defining Alarm Thresholds for Battery Voltage Sensors 70 To configure SNMP chassis alarm thresholds for battery voltage sensors 1 Set the editing level for the CLI to expert user host gt set cli level expert 2 From configuration mode access the configuration statement that defines the thresholds for battery voltage sensors edit user host edit snmp monitor chassis alarm battery voltage 3 Optional Specify the lower threshold for the minor alarm For example edit snmp monitor chassis alarm battery voltage user host set below minor 3024 4 Optional Specify the lower threshold for the major alarm For example edit snmp monitor chassis alarm battery voltage user host set below major 3008 Copyright 2013 Juniper Networks Inc Chapter 9 Configuring SNMP Chassis Alarms uo Optional Specify the lower threshold for the critical alarm For example edit snmp monitor chassis alarm battery voltage user host set below critical 2992 6 Optional Specify the upper threshold for the minor alarm For example edit snmp monitor chassis alarm battery voltage user host set over minor 3744 N Optional Specify the up
194. lve a request Solution Troubleshooting NIC data resolution is a complex task that requires a good understanding of how NIC operates how it resolves resolution requests and how the NIC configuration scenario that you are using performs resolutions This topic provides high level troubleshooting information For further assistance troubleshooting NIC operation and NIC resolutions contact the Juniper Technical Support Center Troubleshoot NIC operation 1 Make sure that the heap size configured for NIC is adequate and that the process is up user host gt show nic statistics process Component Statistics Component Name process Heap in use 456194 bytes 87 Heap limit 524288 bytes Threads 42 Up time 747848 seconds since Wed Jan 31 19 35 57 EST 2007 2 Determine whether there are any NIC resolution errors and whether NIC successfully completed any resolution requests user host gt show nic statistics host Component Statistics Component Name hosts Number of Components Restart 0 Number of No Match Resolutions 0 Copyright 2013 Juniper Networks Inc 183 SRC 4 6 x Monitoring and Troubleshooting Guide Number of Resolution Errors 0 Number of Resolutions 0 3 Test the resolution process by using the test nic resolve command See Configuring the NIC SRC CLI If you are unsure whether NIC is resolving resolution requests view data about those requests to see whether NIC is receiving data 1 Verify that NIC is re
195. me filter filter force Logging Out Subscribers by Session ID To log out subscribers who are accessible by session ID 1 Related Documentation Issue the show sae subscribers session id command to view the subscribers accessible by session ID Issue the request sae logout session id command to log out all subscribers accessible by session ID To log out specific subscribers use the filter option and specify all or part of the session ID for the subscribers that you want to log out user host gt request sae logout session id filter filter To specify that no confirmation is requested before the software logs out the subscribers use the force option user host gt request sae logout session id force user host gt request sae logout session id filter filter force Logging In Simulated Subscribers SRC CLI on page 48 Viewing Subscriber Sessions SRC CLI on page 51 Commands to Manage Simulated Subscribers on page 47 Simulated Subscribers Overview on page 47 Copyright 2013 Juniper Networks Inc 53 SRC 4 6 x Monitoring and Troubleshooting Guide 54 Copyright O 2013 Juniper Networks Inc PART 4 Using SNMP for Monitoring and Troubleshooting Creating Custom SNMP Monitors on page 57 Configuring SNMP Chassis Alarms on page 69 Configuring the SNMP Traps SRC CLI on page 77 Understanding Traps on page 83 Copyright 2013 Juniper Networks Inc 55 SRC 4 6 x Monitoring and Troubleshooting Guid
196. nc 95 SRC 4 6 x Monitoring and Troubleshooting Guide JPS Performance Traps Table 21 on page 96 lists the performance traps for the Juniper Policy Server JPS Table 21 Performance Traps JPS Alarm Threshold Levels default values Trap Event Text Displayed Critical Major Interval sec jpsHeapUsed 250 S JPS D of JavaVMheapisinuse This 95 90 80 60 AV L the threshold of T A jpsCmtsAvgSyncTime 251 S JPS During the last Ps the average 900s 600s 200s 60 R time this JPS spent on CMTS synchronizations is Dms This L the threshold of Tms A josCmtsAvgDecTime 252 S JPS During the last Ps the average 3s 2s 1s 60 R time the CMTS connection spent on successfully completed DEC RPT transactions is Dms This L the threshold of Tms A josMsgHadlrProcTime 253 S JPS During the last Ps the average 10s 5s 2s 60 R time the JPS message handler spent on message handling is Dms This L the threshold of Tms A jpsMsgFlowProcTime 254 S JPS During the last Ps the average 30s 15s 6s 60 R time the JPS message flow spent on message handling is Dms This L the threshold of Tms A jpsMsgHowDroppedMsgs 255 S JPS During the last Ps the numberof 1000 100 1 60 R messages dropped by a JPS message flow is D This L the threshold of T A Related Performance Traps on page 83 D mentation ocumentato Trap Numbers in Performance Traps on page 84 Configuring Performance Traps SRC
197. nection to juniSaeRouterClientid has been closed and redirected to juniSaeRouterFailOver p juniSaeRouterFailOverPort RAISE routerConnDown 212 INFORMATION SAE Router Driver The router connection to juniSaeRouterClientid went down RAISE routerConnRejected 213 INFORMATION SAE Router Driver The router connection from juniSaeRouterClientld has been rejected RAISE routerConnUp 210 INFORMATION SAE Router Driver A new router connection was established with juniSaeRouterClientid RAISE Copyright 2013 Juniper Networks Inc 97 SRC 4 6 x Monitoring and Troubleshooting Guide Table 23 Event Traps continued Trap Event Text Displayed routerConfOutOfSynch 214 When the trap is raised the text displayed is e INFORMATION SAE Router Driver The configured state of router juniSaeRouterClientld is out of synch with SAE The configured action to be taken by SAE is configuredAction RAISE When the trap is cleared the text displayed is INFORMATION SAE Router Driver The configured state of router juniSaeRouterClientld is successfully resynchronized with SAE CLEAR agentStarted 110 INFORMATION Agent The agent has started RAISE agentRestartFailed 111 CRITICAL Agent The agent has failed to restart after ATTEMPTS attempts RAISE agentShutdown 112 INFORMATION Agent The agent has shutdown RAISE componentUp 114 INFORMATION I This component is up RAISE componentDown 115 INFORMATI
198. nfiguration Files Use the following procedure to configure log rotation options for specific files such as the var log wtmp file To configure local options for the logrotate utility 1 From configuration mode access the configuration statement that configures local options for the logrotate utility and specify one or more log filenames Separate log filenames with a space edit user host edit system logrotate logrotate conf logfiles name 2 Specify how you want to rotate and compress the log files by setting the desired options listed in Table 8 on page 32 For example to rotate log files weekly edit system logrotate logrotate conf logfiles name user host set weekly 3 Specify how you want to create new log files by setting the options listed in Table 9 on page 34 For example to use the default setting edit system logrotate logrotate conf logfiles name Copyright 2013 Juniper Networks Inc 35 SRC 4 6 x Monitoring and Troubleshooting Guide user host edit create user host set default Configuring Logging Rotation Options for System and SRC Components SRC CLI Related Documentation 36 Options you configure for system and specific SRC components override global and local options of the same name To configure log rotation options for the system or for SRC components 1 From configuration mode access the configuration statement to configure local options and specify the filename used by the SR
199. nitoring SRC CLI on page 64 SNMP Monitoring on C Series Controllers on page 57 Copyright 2013 Juniper Networks Inc 59 SRC 4 6 x Monitoring and Troubleshooting Guide Configuring an SNMP Alarm on a C Series Controller SRC CLI 60 You can configure SNMP to establish alarms for custom monitors D NOTE Configure only one monitor test at a time To configure an SNMP alarm 1 Specify an SNMP username See Configuring an SNMPv3 Security Name for SNMP Monitoring SRC CLI on page 64 From configuration mode access the configuration statements that configures an alarm For example edit user host edit snmp monitor alarm saeHeapUsage where saeHeapUsage is the name of the alarm Specify the number of seconds between which SNMP samples the value of an object For example edit snmp monitor alarm saeHeapUsage user host set interval 60 Specify whether to sample the actual value of the object or the difference between two values For example to use the actual of the object edit snmp monitor alarm saeHeapUsage user host set sample type absolute value If you set the sample type to delta value you can configure a discontinuity check See Defining a Discontinuity Check to Validate Delta Values SRC CLI on page 63 Optional Indicate that an alarm not be sent when the alarm is initially activated edit snmp monitor alarmsaeHeapUsage user host set ignore startup alarm Optional Spec
200. nnnnnnnnnnrsrnnnnenne 209 information viewing C Web interface nicnn 117 SRC GU na Na ad mm storing log messages SRG OH ea RARR EN renees 26 subscriber session count by managed router viewing on SAE SRG GC LEE sr E 139 221 SRC 4 6 x Monitoring and Troubleshooting Guide subscriber sessions lOSSIMG g nimien R aai 48 lOSSING OU rar aN 52 SNMP information viewing C Web interface viewing ON SAE ccsssssscsssssssssssssesesesessesescscacsesesenenees SRE GE aarlig 132 133 134 135 136 137 support technical See technical support system logging See logging T technical support CONTACTING STAC ecccesesessseeseesesescsesssesseseseeseeeseaters xvii testing CONNECTION to remote NOSE eceesessessesesteseeseeseeees 205 text CONVENTIONS DEFINE ccceccesssecsessesteseessssestesesseeseenes XV threads viewing on SAE C Web interface traps See SNMP traps troubleshooting U user permissions viewing C Wepinterfa CE 122 users viewing C Wep INTE ACE esinsin 119 222 Copyright 2013 Juniper Networks Inc
201. on page 162 Viewing Information About Subscriber Sessions by Session ID C Web Interface Purpose Action 162 View information about subscriber sessions by session ID 1 Click Monitor gt SAE gt Subscribers gt Session ID The Subscribers Session ID pane appears Configure Diagnose Manage Logged in as admin Refresh Preferences About Logout Subscribers Session ID Component ID of subscriber sessions Pals Session ID Value All or part of the subscriber session ID Disk Default No value Interfaces Number of results to be displayed Maximum Results Legal range 1 INF Iptables Ps Secret O Default 25 Display subscriber sessions and service sessions for hidden services Default Disabled Slot Display SAE information for a specified slot Value Currently the chassis has only one slot The valid value is 0 Default 0 Output style Choices brief Display only subscriber sessions terse Display subscriber session ID login name and IP address Default Detail z oR Reset OO LO 2 Inthe Session ID box enter a full or partial session ID name for which you want to display information or leave the box blank to display all subscriber sessions 3 Inthe Maximum Results box enter the maximum number of results that you want to receive 4 Select the Secret check box to set a flag indicating that subscriptions and service sessions from hidden services are displayed 5 Inthe Slot b
202. onitoring Activity for SRC Components Viewing Graphs for a Preset Time Period from a Web Page To display graphs with preset time periods from the Activity Monitor from a Web page http ip address graph amp id username amp pw password amp name graph name amp time tirne period where ip address IP address of the C Series Controller username Username used to log in to the C Series Controller password Password used to log in to the C Series Controller graph name Name of graph to display in the format lt component gt lt graph gt where lt graph gt is the name of the graph as specified in the C Web interface in all lowercase letters with hyphens separating words time period Period of time that data was collected for display in a graph in the format lt number gt lt units gt The lt number gt is the number of lt units gt which are specified as one of the following values m minutes h hours e d days e W weeks e M months e y years For example to view the CPU graph for the System component for the past 10 minutes on the C Series Controller called c2000 for the user admin http c2000 graph amp id admin amp pw secret amp name system cpu amp time 10m Copyright O 2013 Juniper Networks Inc 213 SRC 4 6 x Monitoring and Troubleshooting Guide The CPU Usage graph appears CPU Usage v x u A p 3 a u 17 15 17 20 From 2009 01 28 17 13 To 2009 01 28 17 23 O Idle Curren
203. ooting Guide Table 3 SAE Categories and Severity Levels continued Category DiscoverDecisionHelper Severity Level error DynRadiusServer error debug EmbeddedPrecedenceProcessor error debug 9 EquipRamCache debug EquipRegLdapDataManager info error debug EquipRegLDAPDataManagerConnectionThread info error debug EventBatch error debug EventPublisher error debug Extension Script info error debug ExtInterface info warning error debug Extintf info error debug FailQueve error debug FeedbackManager info error FileDeleter info error debug FileRotater info error debug FileTrackingPluginEventListener info error debug FlexibleRadiusAuthPluginEventListener info error debug FlexibleRadiusTrackingPluginEventListener info error debug FloatingContext info error debug GateProcessor error debug GenericService error debug GenericSessionJobManager info error debug HostUtil error debug HttpAttachmentProcessor info error debug Copyright 2013 Juniper Networks Inc Table 3 SAE Categories and Severity Levels continued Category IdleTimeoutObject Chapter 2 Configuring Logging for SRC Components Severity Level debug InfrastructureServiceSession error debug InterfaceSession error InterfaceTimeoutManager debug
204. or System Temperature Sensors To configure SNMP chassis alarm thresholds for system temperature sensors 1 Set the editing level for the CLI to expert user host gt set cli level expert 2 From configuration mode access the configuration statement that defines the thresholds for system temperature sensors edit user host edit snmp monitor chassis alarm system temperature Ww Optional Specify the upper threshold for the minor alarm For example edit snmp monitor chassis alarm system temperature user host set minor 76 4 Optional Specify the upper threshold for the major alarm For example edit snmp monitor chassis alarm system temperature user host set major 78 ul Optional Specify the upper threshold for the critical alarm For example edit snmp monitor chassis alarm system temperature user host set critical 80 Related Configuring SNMP Chassis Alarms SRC CLI on page 70 Documentation SNMP Chassis Alarms on a C Series Controller on page 69 74 Copyright 2013 Juniper Networks Inc Chapter 9 Configuring SNMP Chassis Alarms Defining Alarm Thresholds for Voltage Sensors You can configure alarm thresholds for these voltage sensors e 1 8V e 3 3V SV e 12V 12V To configure SNMP chassis alarm thresholds for voltage sensors 1 Set the editing level for the CLI to expert user host gt set cli level expert 2 From configuration mode access the configuration st
205. or the critical alarm For example edit snmp monitor chassis alarm cpu core voltage user host set below critical 1008 Copyright 2013 Juniper Networks Inc 7 SRC 4 6 x Monitoring and Troubleshooting Guide 6 Optional Specify the upper threshold for the minor alarm For example edit snmp monitor chassis alarm cpu core voltage user host set over minor 1728 7 Optional Specify the upper threshold for the major alarm For example edit snmp monitor chassis alarm cpu core voltage user host set over major 1740 8 Optional Specify the upper threshold for the critical alarm For example edit snmp monitor chassis alarm cpu core voltage user host set over critical 1752 Defining Alarm Thresholds for CPU DIMM Voltage Sensors To configure SNMP chassis alarm thresholds for CPU DIMM voltage sensors 1 Set the editing level for the CLI to expert user host gt set cli level expert 2 From configuration mode access the configuration statement that defines the thresholds for CPU DIMM voltage sensors edit user host edit snmp monitor chassis alarm cpu dimm voltage 3 Optional Specify the lower threshold for the minor alarm For example edit snmp monitor chassis alarm cpu dimm voltage user host set below minor 2292 4 Optional Specify the lower threshold for the major alarm For example edit snmp monitor chassis alarm cpu dimm voltage user host set below major 2280 5 Optional Specify the
206. ore the SNMP agent calculates a delta value SNMP checks the value of a MIB object called a discontinuity marker If the value of the discontinuity marker changes SNMP does not perform the test for the associated condition until the next polling interval For alarms that do not have a configured event SNMP sends the following notifications that are defined in RFC 2981 Event MIB October 2000 Boolean or existence test mteTriggerFired Threshold test rising value mteTriggerRising Threshold test falling value mteTriggerfalling The default configuration for SNMP custom monitors assesses all objects ina MIB branch based on the object identifier specified for the monitor For this type of monitor you can configure SNMP notification MIB objects located in the same row as the object that generates the event as well as for a single object You can create sophisticated monitors by monitoring an entire branch then creating notifications for multiple objects SNMP Traps Overview on page 77 Configuring an SNMP Alarm ona C Series Controller SRC CLI on page 60 e Configuring an SNMPv3 Security Name for SNMP Monitoring SRC CLI on page 64 e Configuration Statements for Customized SRC SNMP Monitors on page 59 Example SNMP Monitoring of Multiple MIB Objects on page 66 Information about SRC MIBs on the Juniper Web site at http www juniper net techpubs software management src Also see information about the disman event
207. ot box enter the number of the slot for which you want to display SNMP statistics for policies 2 Click OK The Statistics Policy Management pane displays statistics for policies Related Configuring SAE Properties for Global Default SNMP Communities for Use with JunosE Documentation Routers and Devices Running Junos OS Viewing Information About Policies C Web Interface on page 151 Viewing SNMP Information for Policies SRC CLI on page 143 Viewing SNMP Statistics About Server Processes C Web Interface Purpose View SNMP statistics about server processes Action 1 Click Monitor gt SAE gt Statistics gt Process The Statistics Process pane appears Configure Diagnose Manage Logged in as admin Refresh Preferences About Logout Statistics Process Component Display SAE information for a specified slot SER Slot Value Currently the chassis has only one slot The valid value is 0 Disk Default 0 Interfaces Eg Reset Iptables JPS orks Inc All Rights Notice Privacy Juniper yout Net 2 Inthe Slot box enter the number of the slot for which you want to display SNMP statistics for server processes Copyright 2013 Juniper Networks Inc 169 SRC 4 6 x Monitoring and Troubleshooting Guide 3 Click OK The Statistics Process pane displays statistics for server processes Related Configuring SAE Properties for Global Default SNMP Communities for Use with JunosE Documentation Routers and
208. other important log files in the system var log directory The collected information is in a zipped tarball file that is named in the format diagnostic hostname productname Y YMMDD HHMMSS tar gz for example diagnostic atlanta C2000 20110926 184950 tar gz and is found in the opt UMCractivityWvar diagnostic directory The tarball file contains the diagnostic info log file which contains all the operations performed by the command and their success status If an error occurred during an operation the error message is logged The Activity Monitor can create graphs from the collected data to help determine the state of the SRC component for troubleshooting You can view the graphs for the components during a specified time in the C Web interface Copyright 2013 Juniper Networks Inc 209 SRC 4 6 x Monitoring and Troubleshooting Guide Related Documentation The generated graphs include data about the C Series Controller CPU usage Load average Memory usage e Interface traffic The generated graphs for the SAE include the following data Heap usage Service activity User activity Users and services The generated graphs for the components include data generated from the MIBs ACP juniAcpHeapLimit juniAcoHeapUsed juniAcpIntfTrackingEvents juniAcplgnoredTrackingEvents juniAcpCongestionPoints juniAcpVirtualRouters juniAcpCPUpdateRcvd juniAcpUserUpdateRcvd juniAcpCPActiveUpdate juniAcpUserActive
209. oup west region configuration driver simulated default simJunos user host set driver type junos junose pc mm 3 Optional Configure the version of the router software to simulate This is the software version that is sent by the router edit shared sae group west region configuration driver simulated default simJunos user host set router version router version 4 Configure the IP address of the device driver edit shared sae group west region configuration driver simulated default simJunos user host set driver address driver address 5 Optional Configure the name of a virtual router that is used to connect to the SAE This value is passed to the router initialization script It is not supported on the device running Junos OS edit shared sae group west region configuration driver simulated default simJunos user host set transport router transport router 6 Optional Verify the configuration of the simulated driver edit shared sae group west region configuration driver simulated default simJunos user host show driver type junos router version 8 4 driver address 10 10 90 5 For information about setting up SAE groups see Configuring an SAE Group Related Configuring a Simulated Router Driver for Testing C Web Interface on page 45 D tati ocumentation e Simulated Router Drivers for the SRC Software Overview on page 43 44 Copyright 2013 Juniper Networks Inc CHAPTER 6 Configuring a Simula
210. over filename rollover filename maximum file size maximum file size 3 syslog logger f filter filter port port syslog host syslog host syslog facility syslog facility format format Copyright 2013 Juniper Networks Inc 25 SRC 4 6 x Monitoring and Troubleshooting Guide D NOTE The device filter key option is available only on the SAE component For detailed information about each configuration statement see SRC PE CLI Command Reference Related Configuring System Logging SRC CLI on page 28 Documentation Configuring an SRC Component to Store Log Messages in a File SRC CLI on page 26 Before You Configure Logging for SRC Components on page 37 Logging for SRC Components Overview on page 7 Categories and Severity Levels for Event Messages on page 7 Configuring an SRC Component to Store Log Messages in a File SRC CLI Use the following statements to configure an SRC component to store log messages in a file logger name file device filter key device filter key filter filter filename filename rollover filename rollover filename maximum file size maximum file size If you plan to filter log messages you should be familiar with severity levels and filters for logging before you configure system logging for a component See Categories and Severity Levels for Event Messages on page 7 To configure component logging to a file 1 From configuration mode access the configuration st
211. ox enter the number of the slot for which you want to display subscriber session information 6 Select an output style from the Style list 7 Click OK The Subscribers Session ID pane displays information about subscriber sessions Copyright 2013 Juniper Networks Inc Chapter 16 Monitoring SAE Data C Web Interface Related Configuring Access to Subscriber Data SRC CLI Documentation Viewing Information About Subscriber Sessions by DN C Web Interface on page 158 Viewing Information About Subscriber Sessions by IP Address C Web Interface on page 159 Viewing Information About Subscriber Sessions by Login Name C Web Interface on page 160 Viewing Information About Subscriber Sessions by Service Name C Web Interface on page 161 Viewing SNMP Information C Web Interface You can use the C Web interface to view SNMP statistics for the SAE configuration by e Viewing SNMP Statistics for the Directory C Web Interface on page 163 e Viewing SNMP Statistics for Directory Connections C Web Interface on page 164 Viewing SNMP Statistics for Client Licenses C Web Interface on page 165 Viewing SNMP Statistics for Licenses by Device C Web Interface on page 166 e Viewing SNMP Statistics for Local Licenses C Web Interface on page 167 e Viewing SNMP Statistics About Policies C Web Interface on page 168 e Viewing SNMP Statistics About Server Processes C Web Interface on page 169 e Viewing SNM
212. per threshold for the major alarm For example edit snmp monitor chassis alarm battery voltage user host set over major 3760 8 Optional Specify the upper threshold for the critical alarm For example edit snmp monitor chassis alarm battery voltage user host set over critical 3776 Related Configuring SNMP Chassis Alarms SRC CLI on page 70 Documentation SNMP Chassis Alarms on a C Series Controller on page 69 Defining Alarm Thresholds for CPU Sensors Defining Alarm Thresholds for CPU Core Voltage Sensors on page 71 Defining Alarm Thresholds for CPU DIMM Voltage Sensors on page 72 e Defining Alarm Thresholds for CPU Temperature Sensors on page 73 Defining Alarm Thresholds for CPU Core Voltage Sensors To configure SNMP chassis alarm thresholds for CPU core voltage sensors 1 Set the editing level for the CLI to expert user host gt set cli level expert 2 From configuration mode access the configuration statement that defines the thresholds for CPU core voltage sensors edit user host edit snmp monitor chassis alarm cpu core voltage 3 Optional Specify the lower threshold for the minor alarm For example edit snmp monitor chassis alarm cpu core voltage user host set below minor 1030 4 Optional Specify the lower threshold for the major alarm For example edit snmp monitor chassis alarm cpu core voltage user host set below major 1020 5 Optional Specify the lower threshold f
213. pter 15 Chapter 16 Chapter 17 Chapter 18 Chapter 19 Chapter 20 Abbreviated Table of Contents About the DOCUMENTATION 3 wise ceed a bore ennen ees a eeeee wn eee XV Monitoring and Troubleshooting the SRC Software and C Series Controllers Overview of Monitoring and Troubleshooting ToolS 00ee eens 3 Using Logging for the SRC Software and C Series Controllers Configuring Logging for SRC ComponentsS 0cce cee eee eens 7 Configuring Logging for SRC Components with the CLI 25 Configuring Logging for SRC Components C Web Interface 37 Using Simulated Router Drivers and Simulated Subscribers for Testing Configuring a Simulated Router Driver for Testing SRC CLI 43 Configuring a Simulated Router Driver for Testing C Web Interface 45 Using Simulated Subscribers for Testing SRC CLI 000c eee 47 Using SNMP for Monitoring and Troubleshooting Creating Custom SNMP Monitors 0 2 00 eee eee 57 Configuring SNMP Chassis AlarmMS 000 cee ee eee ken eens 69 Configuring the SNMP Traps SRC CLI ccc cece eee eee eee 77 Understanding TrapS 20 2 i105 sdcceu ives neien twee awe abana Cage es 83 Monitoring the SRC Software and the C Series Controller with the C Web Interface and the SRC CLI Monitoring with the SRC CLI and the C Web Interface 5 105 Monitoring the System SRC CLI ccc cece eee eens 109 Monitoring the Syst
214. ptions and service sessions from hidden services user host gt show sae subscribers accounting user id secret user host gt show sae subscribers accounting user id filter filter secret To view only the subscriber session information without service sessions user host gt show sae subscribers accounting user id brief user host gt show sae subscribers accounting user id filter filter brief To view the subscriber session ID login name and IP address user host gt show sae subscribers accounting user id terse user host gt show sae subscribers accounting user id filter filter terse To restrict the number of displayed results user host gt show sae subscribers accounting user id maximum results maximum results user host gt show sae subscribers accounting user id filter filter maximum results maximum results e Viewing General Information About Subscriber Sessions SRC CLI on page 133 e Viewing e Viewing e Viewing SRC CL e Viewing nformati nformat nformat on About Subscriber Sessions by Login Name SRC CLI on page 135 ion About Subscriber Sessions by DN SRC CLI on page 133 ion About Subscriber Sessions by IP Address VPN Identifier or both on page 134 nformat ion About Subscriber Sessions by Session ID SRC CLI on page 137 Viewing the Number of Active Service Sessions SRC CLI Purpose Action Related Documentation 138 View the number of currently active service sessions that exis
215. r session information Select an output style from the Style list Click OK The Subscribers Login Name pane displays information about subscriber sessions Copyright 2013 Juniper Networks Inc Related Documentation Chapter 16 Monitoring SAE Data C Web Interface Configuring Access to Subscriber Data SRC CLI Viewing Information About Subscriber Sessions by DN C Web Interface on page 158 Viewing Information About Subscriber Sessions by IP Address C Web Interface on page 159 Viewing Information About Subscriber Sessions by Service Name C Web Interface on page 161 Viewing Information About Subscriber Sessions by Session ID C Web Interface on page 162 Viewing Information About Subscriber Sessions by Service Name C Web Interface Purpose View information about subscriber sessions by service name Action 1 Click Monitor gt SAE gt Subscribers gt Service Name The Subscribers Service Name pane appears Configure Diagnose Manage Logged in as admin Refresh Preferences About Logout SAE Subscribers Service Name Component Service name of subscriber sessions Data Service Name Value All or part of the service name Disk Default No value Number of results to be displayed Interfaces Maximum Results Legal range 1 INF Default 25 Display subscriber sessions and service sessions for hidden services Sect o Default Disabled Display SAE information for a specified slot Slot Value Currently the c
216. r debug ListenerJobManager debug LiveSessions info error debug LocalPersistentCheck error LoginNameParser error LoginRequest error debug LogoutRequest error debug Main info debug panic MemFailQueue error debug MsglinOps info error debug_8 MsgOutPostUpdateOps info debug debug_8 MsgOutUpdateOps info debug NasPortUtil debug 12 Copyright 2013 Juniper Networks Inc Table 3 SAE Categories and Severity Levels continued Category NicProxyCompleter Chapter 2 Configuring Logging for SRC Components Severity Level error OpsBuffer info error debug PingJob error debug 9 PluginManager info error debug PluginUtil error PolicyParameterEngine debug_8 PolicyDecisionPointLDAPListener info debug PolicyListAugmentingProcessor info error debug PolicyLists debug_9 PolicyListSharingProcessor error debug PolicyPPRMsg warning error debug PolicyServiceSession error debug PolicySharedCtx info error debug Portal API error debug PostponedScheduledService debug PostSyncJob debug ProcessorManager error debug ProxyDriverManager error debug ProxyRouterDriver info error debug debug_9 ProxySessionManager info error panic PTSPRouterDriver error debug PublisherQueue info error debug QoSAttachmentProcessor info error
217. r detailed information about the route from the local system to a remote host Action To view brief route information user host gt show route Kernel IP routing table Destination Gateway Genmask Flags MSS Window irtt Iface 192 2 2 0 tort hth th 255 255 255 0 U 0 0 0 ethod default srclabl mylab 0 0 0 0 UG 0 0 0 ethd To view detailed route information user host gt show route detail Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface MSS Window irtt 192 2 2 0 MT hth th I 255 255 255 0 U 0 0 O etho 0 0 default srclabl mylab 0 0 0 0 UG 0 0 Oo ethO 0 0 0 The detailed output includes the additional Metric Ref and Use fields Related Viewing Information About the Routing Table C Web Interface on page 207 Documentation e Viewing the Route Information SRC CLI on page 204 e Viewing Interface Information SRC CLI on page 205 Testing Connectivity to Remote Hosts SRC CLI on page 203 Commands to Troubleshoot Connections to Remote Hosts Overview on page 203 Viewing Interface Information SRC CLI Purpose You can view information about all system interfaces or about a specified interface Action To view information about all system interfaces userGhost gt show interfaces eth0 Link encap Ethernet HWaddr 00 30 48 55 B6 FC inet addr 10 227 6 42 Bcast 10 227 6 255 Mask 255 255 255 0 inet6 addr fe80 230 48ff fe55 b6fc 64 Scope Link UP BROADCAST RUNNING MULTICAST MTU 150
218. r the host process Related Documentation Configuring the NIC C Web Interface Viewing Host Statistics C Web Interface on page 185 Viewing Statistics for the NIC Process SRC CLI on page 176 Viewing Resolvers C Web Interface You can view resolvers and monitor resolver statistics C Web Interface by e Viewing Resolvers C Web Interface on page 186 e Viewing Resolver Statistics C Web Interface on page 187 Viewing Resolvers C Web Interface Purpose View information about a resolver 186 Copyright 2013 Juniper Networks Inc Chapter 18 Monitoring the NIC C Web Interface Action 1 Click Monitor gt NIC gt Data gt Resolver The Data Resolver pane appears NIC Data Resolver D Maximum Results D Name ame Slot 0 ox Reset 4 2 Inthe Maximum Results box enter the maximum number of results that you want to receive 3 Inthe Name box enter the name of the resolver for which you want to view data 4 Inthe Slot box enter the number of the slot for which you want to display resolver data 5 Click OK The Data Resolver pane displays the properties for the resolver Related Configuring the NIC C Web Interface Documentation e Viewing Resolver Statistics C Web Interface on page 187 e Viewing Statistics for NIC Resolvers SRC CLI on page 177 e Viewing Data for NIC Resolvers SRC CLI on page 180 Viewing Resolver Statistics C Web Interface Purpose View statistics about
219. r the iptables tool The nat table provides rules for rewriting packet addresses filter Displays information for the filter table for the iptables tool The filter table provides rules for defining packet filters Copyright 2013 Juniper Networks Inc 199 SRC 4 6 x Monitoring and Troubleshooting Guide 200 Related Documentation mangle Displays information for the mangle table for the iptables tool The mangle table provides rules for adjusting packet options such as quality of service For example user host gt show iptables Chain INPUT policy ACCEPT 25M packets 9401M bytes pkts bytes target prot opt in out source destination Chain FORWARD policy ACCEPT 0 packets 0 bytes pkts bytes target prot opt in out source destination Chain OUTPUT policy ACCEPT 24M packets 4506M bytes pkts bytes target prot opt in out source destinationreset counters To reset the values in the output for the show iptables command user host gt show iptables reset counters Configuring the Redirect Server SRC CLI Defining Traffic to Transmit to the Redirect Server SRC CLI Viewing Statistics for the Redirect Server SRC CLI on page 199 Viewing Information for Filtered Traffic C Web Interface on page 202 Traffic Redirection Overview Copyright 2013 Juniper Networks Inc CHAPTER 22 Monitoring the Redirect Server and Filtered Traffic C Web Interface e Viewing Statistics for the Redirect Server C We
220. rands amp or OpenQuotes e CloseQuotes The deviceFilterKey expression is composed of one or more SingleDevKey expressions A SingleDevKey expression should begin with an open brace and end with a close brace The SAE filters events by evaluating each deviceFilter in order from left to right You can specify an unlimited number of device filters however the order in which you specify the device filter affects the result The SAE only logs event messages that match all the criteria D NOTE After you configure the device filter key option restart the SAE for the configuration to take effect You specify the deviceFilter with the format rules described in Table 6 on page 21 Table 6 SAE Debug Device Filter Formatting Rules Rule OpenQuotes Definition Meaning Denotes an open single or double quotation mark which is used at the beginning of an expression CloseQuotes Denotes a close single or double quotation mark which is used at the end of an expression Equality Allows logging of only the logevent whose value is equal to the value specified in the valName Allows logging of only the logevent whose value is not equal to the value specified in the valName Operands Allows logging of only the logevent whose value matches the valName value specified in all SingleDevKey expressions in a deviceFilterKey Allows logging of the logevent even if its value matches the valN
221. re NEN a 138 customer SUPPOST ce ceesssescsesesssssseecsessssseseeecsssesseseesceeseees xvii CONTACTING STAC eececceesesssssseseseesescsesesescsseeeeeseseseerers xvii D device drivers simulated CONFISULING ccc cseeeseeseseseseseeeseeeeseee 43 SRC CLI viewing on SAE C Web INterface eeccessessssecsessssesesesseesssteseees 152 SRO CU oane E 124 documentation COMMENTS Orein aa s xvii Copyright 2013 Juniper Networks Inc E equipment registration viewing on SAE C Web INTErfFACE ces eeseesestesestssessessesteseeseesesnees SRC CLI event messages See logging F filtered traffic statistics 199 202 interfaces information viewing C Web INterfaCe ccesescsessssessessesestesseseeseseees 208 SRE CE Er rr 205 iptables Linux tool monitoring C Web INTErfACC Lu eeceesesessesestssesseesesseseesseneeseens 202 SRG CU soso scse EN NE 199 J Juniper Networks database SNMP information viewing C Web INTC rface ccccescsessesesseseeseseseeees 163 164 Juniper Networks database viewing C Web INTErfaACO eeccessssssseesessestesteseesesseeeseesees 120 121 L license viewing on SAE C WeD interfaCa niinniin 151 SRG CE ar Ran ON Sees 126 licenses SNMP information viewing C Web INtErfaCO hu cescescessesessessestesteseeseeees 165 167 logging configuration StATEMENS cccccsccsesesesessseeseseeeseees 25 configuring component SRG Gla or ran AAEN 26 file folders C Web INTC rfaCe cececcsessssssssese
222. ress Value MAC address in the format xxixxixx xxixxixx Disk Default No value Inter MAC address of login registrations Number of results to be displayed Des Maximum Results Legal range 1 INF Iptables Default 25 JPS Display SAE information for a specified slot Slot Value Currently the chassis has only one slot The valid value is 0 Default 0 Output style Choices Style brief Display only MAC address of login registrations Default Detail Ok Reset uniper Networks Inc All Rights Reserved Trademark Notice Privacy Juniper BE Net In the MAC Address box enter a MAC adaress that specifies the login registrations that you want to display Use the format XX XX XX XX XX XX In the Maximum Results box enter the maximum number of results that you want to receive In the Slot box enter the number of the slot for which you want to display login registration information Select an output style from the Style list Click OK The Registered Login pane displays information about the login registrations For information about login and equipment registrations see the SRC PE Sample Applications Guide Related Documentation Removing Login Registrations C Web Interface Removing Equipment Registrations C Web Interface Viewing Login Registrations SRC CLI on page 128 Viewing Equipment Registrations C Web Interface on page 154 Viewing Information About Threads C Web Interfa
223. rface name used when logging in the simulated subscriber use the interface description option Optional To specify the port identifier of an interface used when logging in the simulated subscriber use the nas port id option Copyright 2013 Juniper Networks Inc 49 SRC 4 6 x Monitoring and Troubleshooting Guide Logging In Unauthenticated DHCP Subscribers Use the following command to log in simulated IPv4 unauthenticated DHCP subscribers request sae login ipv4 unauthenticated dhcp virtual router virtual router address address mac address mac address lt login name login name gt lt service bundle service bundle gt lt radius class radius class gt lt interface name interface name gt lt interface alias interface alias gt lt interface description interface description gt lt nas port id nas port id gt To log in a simulated IPv4 unauthenticated DHCP subscriber 1 Issue the request sae login ipv4 unauthenticated dhcp command Specify the virtual router address and mac address options user host gt request sae login ipv4 unauthenticated dhcp virtual router virtual router address address mac address mac address 2 Optional To specify the fully qualified name used to log in the simulated subscriber use the login name option 3 Optional To specify the service bundle used when logging in the simulated subscriber use the service bundle option 4 Optional To specify the RADIUS class Used when logging in the
224. ritical event Raise major event CRITICAL CRITICAL No action Related Configuring Event Traps SRC CLI on page 81 Documentation 100 Copyright 2013 Juniper Networks Inc Chapter 11 Understanding Traps Event Traps on page 97 Copyright 2013 Juniper Networks Inc 101 SRC 4 6 x Monitoring and Troubleshooting Guide 102 Copyright 2013 Juniper Networks Inc PART 5 Monitoring the SRC Software and the C Series Controller with the C Web Interface and the SRC CLI Monitoring with the SRC CLI and the C Web Interface on page 105 Monitoring the System SRC CLI on page 109 Monitoring the System C Web Interface on page 115 Monitoring SAE Data SRC CLI on page 123 Monitoring SAE Data C Web Interface on page 149 Monitoring and Troubleshooting the NIC SRC CLI on page 175 Monitoring the NIC C Web Interface on page 185 Monitoring NTP SRC CLI on page 191 Monitoring NTP C Web Interface on page 195 Monitoring Redirect Server SRC CLI on page 199 e Monitoring the Redirect Server and Filtered Traffic C Web Interface on page 201 Troubleshooting Network Connectivity SRC CLI on page 203 Monitoring Network Connectivity C Web Interface on page 207 Monitoring Activity for SRC Components on page 209 Copyright 2013 Juniper Networks Inc 103 SRC 4 6 x Monitoring and Troubleshooting Guide 104 Copyright O 2013 Juniper Networks Inc CHAPTER 12 Monitoring with
225. rmal zone 2224128 pages LIFO batch 16 HighMem zone 0 pages LIFO batch 1 DMI 2 3 present ACPI PM Timer IO Port 0x408 ACPI Local APIC address Oxfee00000 ACPI LAPIC Cacpi_id 0x01 lapic_id 0x00 enabled Processor 0 15 4 APIC version 16 ACPI LAPIC Cacpi_id 0x02 lapic_id 0x06 enabled Processor 6 15 4 APIC version 16 ACPI LAPIC Cacpi_id 0x03 lapic_id 0x01 enabled Processor 1 15 4 APIC version 16 ACPI LAPIC Cacpi_id 0x04 lapic_id 0x07 enabled Processor 7 15 4 APIC version 16 Setting APIC routing to flat ACPI IOAPIC Cid 0x08 address Oxfec00000 gsi_base 0 IOAPIC O apic_id 8 version 32 address Oxfec00000 GSI 0 23 ACPI IOAPIC Cid 0x09 address Oxfec10000 gsi_base 24 IOAPIC 1 apic_id 9 version 32 address Oxfec10000 GSI 24 4 ACPI INT_SRC_OVR bus 0 bus_irq 0 global irq 2 dfl dfl ACPI INT_SRC_OVR bus 0 bus irq 9 global_irq 9 high level ACPI IRQO used by override ACPI IRQ2 used by override ACPI IRQ9 used by override Using ACPI MADT for SMP configuration information Allocating PCI resources starting at e2000000 gap e0000000 1ec00000 Checking aperture Copyright 2013 Juniper Networks Inc Chapter 13 Monitoring the System SRC CLI Built 1 zonelists Kernel command line ro root dev vg0 root console tty0 console ttyS0 9600 Initializing CPU 0 PID hash table entries 4096 order 12 131072 bytes time c Using 3 579545 MHz PM timer time c Detected 3200 267 MHz processor Console
226. rmance Maps eee EDER Eran ee ee eee eee 96 Event MoDs neer ked DRE abo orcad ea ha even grasaeokwe eas 97 Alarm State MaMSiMOMS 2 rasede I E E de nr 100 Part 5 Monitoring the SRC Software and the C Series Controller with the C Web Interface and the SRC CLI Chapter 12 Monitoring with the SRC CLI and the C Web Interface 105 Monitoring with the SRC CLI and the C Web Interface 105 SRC MOMILOMNS OPON nsec s on deer Seago ed KER ee eer aehwaaehwaeon as 105 Copyright 2013 Juniper Networks Inc vii SRC 4 6 x Monitoring and Troubleshooting Guide Chapter 13 Chapter 14 Chapter 15 viii Monitoring the System SRC CLI ccc cece eee ee eee eens 109 Viewing Information About a C Series Controller SRC CLI 109 Viewing Information About Components Installed SRC CLI 111 Viewing Information About Boot Messages SRC CLI 0 000 mM Viewing Information About Security Certificates SRC CLI 13 Monitoring the System C Web Interface 0 00 cece eee 115 Viewing Information About the System C Web Interface 115 Viewing the System Date and Time C Web Interface 116 Viewing Information About Components Installed C Web Interface 117 Viewing Information About Boot Messages C Web Interface 117 Viewing Information About Security Certificates C Web Interface
227. rmat lt virtual router name gt lt router name gt For device drivers running Junos OS and PCMM drivers use the format default lt router name gt 3 Inthe Slot box enter the number of the slot for which you want to display SNMP statistics for device licenses 4 Select an output style from the Style list 5 Click OK The Statistics License Device pane displays statistics for virtual router licenses Related Connections to Managed Devices Documentation Viewing SNMP Information for Local Licenses SRC CLI on page 142 Viewing SNMP Information for Client Licenses SRC CLI on page 141 Viewing SNMP Information for Licenses on Virtual Routers SRC CLI on page 142 e Viewing SNMP Statistics for Client Licenses C Web Interface on page 165 e Viewing SNMP Statistics for Local Licenses C Web Interface on page 167 Viewing SNMP Statistics for Local Licenses C Web Interface Purpose View SNMP statistics for local licenses Action 1 Click Monitor gt SAE gt Statistics gt License gt Local Copyright 2013 Juniper Networks Inc 167 SRC 4 6 x Monitoring and Troubleshooting Guide Related Documentation The Statistics License Local pane appears Configure Diagnose Manage Logged in as admin Refresh Preferences About Logout Statistics License Local Component Di Display SAE information for a specified slot Slot Value Currently the chassis has only one slot The valid value is 0 D
228. rs juniSaeRouterMsgTimeouts 3 3 Related SNMP Monitoring on C Series Controllers on page 57 Documentation Configuring an SNMP Alarm on aC Series Controller SRC CLI on page 60 66 Copyright 2013 Juniper Networks Inc Chapter 8 Creating Custom SNMP Monitors Configuration Statements for Customized SRC SNMP Monitors on page 59 Copyright 2013 Juniper Networks Inc 67 SRC 4 6 x Monitoring and Troubleshooting Guide 68 Copyright O 2013 Juniper Networks Inc CHAPTER 9 Configuring SNMP Chassis Alarms SNMP Chassis Alarms on aC Series Controller on page 69 Configuring SNMP Chassis Alarms SRC CLI on page 70 Defining Alarm Thresholds for Battery Voltage Sensors on page 70 Defining Alarm Thresholds for CPU Sensors on page 71 Defining Alarm Thresholds for Fan Speed Sensors on page 73 Defining Alarm Thresholds for System Temperature Sensors on page 74 Defining Alarm Thresholds for Voltage Sensors on page 75 SNMP Chassis Alarms on aC Series Controller You can configure SNMP to establish built in chassis alarms that monitor the sensors onC Series Controllers The chassis alarms are preconfigured SNMP monitors that detect changes in the MIB objects described in Juniper SDX CHASSIS TRAP MIB Chassis Trap MIB The chassis alarms are configured to use the Boolean test condition and absolute value sampling method Each time you start the SNMP agent and you have enabled chassis alarms the initial act
229. scscsessseseseesesseasseseseees FAN speed sensor maa er re a OVET OW sisters a e RAREN system temperature sensors z VOltage SENSOFS aR SNMP events ie er kuai Copyright O 2013 Juniper Networks Inc Index SNMP monitors Alar M Sas Are brat Aaah seek i ti Boolean test cssseins icin ana EXISTENCE test threshold test CHASSIS AlAPMS ccescsssesseseeseesessesteseeseeseesesees COMPSUNINS sviesos VENUS piapa aE EN TAA OVEM EW asiana R S security MAM Chu ecesessscscsesesssesecscssseseseesscsssesesesesesesaeaces statement NiCraArchy uu cscs eseeseseeeeseseeees 59 SNMP traps alarm State traNsitiONS c sss 100 configUriNg sccscccscessccossscst savscsssstsecsestastecseanieesesssazensees 80 81 event traps COMPS UNG s isnin ledn annen 81 list and descriptiOon ssscseersserrssrrrsrrrsrrrnenee 97 notifications OVErviewW ccccssscsssesssssesssesscscscseecececsessssssesesesrscaceueseseesensssnsrs 78 performance traps ACCOUNTING csescccsssssessssesesesesessssesesssesesecseseassesesees authentication i Chassis rarere EE COA IS UENS so rarere defined sr esna policy ENngiNe ssssseseiesrresrresrrrrrrssrrnnrrssrrnnrresrrress redirect seNe nnram iaiia router Qr Vef sssssesssersesressrrssrresnrrnsrrrenrienrrrerrresrrrern system MANABEMENL ccccsccsesessseesescseeeseeeees 94 SRC CLI viewing C Web mternaca aa 121 SRC components activity MON tOT Ng s seseesnnsnnnsnenenrnsi
230. secret user host gt show sae subscribers login name filter filter secret To view only the subscriber session information without service sessions user host gt show sae subscribers login name brief user host gt show sae subscribers login name filter filter brief To view the subscriber session ID login name and IP address user host gt show sae subscribers login name terse user host gt show sae subscribers login name filter filter terse To restrict the number of displayed results user host gt show sae subscribers login name maximum results maximum results user host gt show sae subscribers login name filter filter maximum results maximum results Copyright 2013 Juniper Networks Inc 135 SRC 4 6 x Monitoring and Troubleshooting Guide Related Documentation Configuring Access to Subscriber Data SRC CLI e Viewing General Information About Subscriber Sessions SRC CLI on page 133 Viewing Information About Subscriber Sessions by DN SRC CLI on page 133 Viewing Information About Subscriber Sessions by IP Address VPN Identifier or both SRC CLI on page 134 e Viewing Information About Subscriber Sessions by Session ID SRC CLI on page 137 e Viewing Information About Subscriber Sessions by Accounting User Identifier SRC CLI on page 137 Viewing Information About Subscriber Sessions by Service Name SRC CLI 136 Purpose Action Related Documentation View information about subscriber ses
231. security name edit snmp monitor user host set security name your security name Related Configuring an SNMP Alarm on aC Series Controller SRC CLI on page 60 D tati ea ee Configuration Statements for Customized SRC SNMP Monitors on page 59 SNMP Monitoring on C Series Controllers on page 57 Defining Events for Which SNMP Sends Notifications SRC CLI NOTE Do not define an event notification and an SNMP set for the same event To define an event for which SNMP sends a notification 1 From configuration mode access the configuration statements that configure SNMP event notification and provide a name for the event For example edit user host edit snmp monitor event routerErrorEvent notification 64 Copyright 2013 Juniper Networks Inc Chapter 8 Creating Custom SNMP Monitors 2 Specify the object identifier OID object identifier of the notification object For example edit snmp monitor event routerErrorEvent notification user host set oid juniSdxMibs 24 2 1 3 Optional Allow wildcards in the OID to include instances of subidentifiers that correspond to the monitored object For example edit snmp monitor event routerErrorEvent notification notification user host set wildcarded object junisaeRouterMsgErrors juniSaeRouterMsgTimeouts Alternatively you can configure event notification to Use a specific OID Related Configuring an SNMP Alarm on aC Series Controller SRC CLI on page 60
232. sestestesesseseseeseesees 7 file logging configuring SRC Go HEE ES Een 26 log files FOLIO Nr rese ore einen eset 22 messages Categories isiin iiis isnisiarsseiciiardacasatianiiindtion 8 Filters AE E E E 7 19 219 SRC 4 6 x Monitoring and Troubleshooting Guide formatis eae ee eee 29 SOVETITY LOVES cece cesescstestseesescseseseeteseseeseeeeees 18 OVENVIEW rece re agin dain 7 system log configuring SRE GEIR asa a Nee re 28 login registration viewing on SAE C Web interface 155 SRCE br renen 128 logrotate utility configuration StAteEMENtS ccc 30 configuring SRE CU ware oun aana oa 31 overview SRG Gb zeae servers ave a orate 22 M manuals COMMENTS Ore serene xvii MIBs Juniper Networks liSt s ssessseeesereerressrrserrrsrrrserrnerrness 78 monitoring with SNMP agent 77 monitoring tools C Web INtErfACO nn esescssessssessestsseesessesteseeseeseseseeses 105 OW GIVI QW sneen 3 SRC CLI N network devices SNMP information viewing C Web interface 166 171 172 Network Time Protocol See NTP NIC network information collector agents viewing C Web interface 2 ccc esserne 188 SG D E EA 179 hosts viewing C Web iNterface cccccessssessessesssssessssessssteseeseees 185 SRC CE ERE eee 177 monitoring C Web interface 185 SRG 2S E ma ni heale ERE 175 resolution data troubleshooting 183 resolution data viewing C Web interface aa en aen cca sedecesces 186 SRC CL lasiicktinnin
233. shold for the critical alarm For example edit snmp monitor chassis alarm cpu temperature user host set critical 80 Related Configuring SNMP Chassis Alarms SRC CLI on page 70 D tati ocumentanon SNMP Chassis Alarms on a C Series Controller on page 69 Defining Alarm Thresholds for Fan Speed Sensors To configure SNMP chassis alarm thresholds for fan speed sensors 1 Set the editing level for the CLI to expert user host gt set cli level expert 2 From configuration mode access the configuration statement that configures the chassis alarm thresholds for fan speed sensors edit user host edit snmp monitor chassis alarm fan speed 3 Optional Specify the lower threshold for the minor alarm in revolutions per minute For example edit snmp monitor chassis alarm fan speed user host set minor 540 4 Optional Specify the lower threshold for the major alarm in revolutions per minute For example edit snmp monitor chassis alarm fan speed user host set major 405 Copyright 2013 Juniper Networks Inc 73 SRC 4 6 x Monitoring and Troubleshooting Guide 5 Optional Specify the lower threshold for the critical alarm in revolutions per minute For example edit snmp monitor chassis alarm fan speed user host set critical 270 Related Configuring SNMP Chassis Alarms SRC CLI on page 70 D tati ocumentanon SNMP Chassis Alarms on a C Series Controller on page 69 Defining Alarm Thresholds f
234. simulated subscriber use the radius class option 5 Optional To specify the virtual interface Used when logging in the simulated subscriber use the interface name option 6 Optional To specify the interface description Used when logging in the simulated subscriber use the interface alias option If you are simulating JunosE routers the interface alias is the description that is configured on JunosE routers with the interface description command 7 Optional To specify the alternate interface name used when logging in the simulated subscriber use the interface description option 8 Optional To specify the port identifier of an interface used when logging in the simulated subscriber use the nas port id option Logging In Unauthenticated Interface Subscribers Use the following command to log in simulated IPv4 unauthenticated interface subscribers request sae login ipv4 unauthenticated interface virtual router virtual router interface name interface name lt address address gt lt login name login name gt lt service bundle service bundle gt lt radius class radius class gt lt interface alias interface alias gt lt interface description interface description gt lt nas port id nas port id gt To log in a simulated IPv4 authenticated interface subscriber 50 Copyright 2013 Juniper Networks Inc Chapter 7 Using Simulated Subscribers for Testing SRC CLI 1 Issue the request sae login ipv4 authenti
235. sions that are associated with a specified service You can view all or restricted information about all associated subscriber sessions To view information about subscriber sessions activated by a subscription to an active service session user host gt show sae subscribers service name To view information about particular subscriber sessions specify all or part of the service name user host gt show sae subscribers service name filter filter To view the subscriptions and service sessions from hidden services user host gt show sae subscribers service name secret user host gt show sae subscribers service name filter filter secret To view only the subscriber session information without service sessions user host gt show sae subscribers service name brief user host gt show sae subscribers service name filter filter brief To view the subscriber session ID login name and IP address user host gt show sae subscribers service name terse user host gt show sae subscribers service name filter filter terse To restrict the number of displayed results user host gt show sae subscribers service name maximum results maximum results user host gt show sae subscribers service name filter filter maximum results maximum results Configuring Access to Subscriber Data SRC CLI e Viewing General Information About Subscriber Sessions SRC CLI on page 133 e Viewing Information About Subscriber Sessions by DN SRC CLI on page 133 e Vi
236. solver requests the data Passive agents provide information only when a resolver requests it Connection to Data Whether or not the agent has a connection to its data source for Source example a directory agent to the directory or an SAE plug in agent to the CORBA naming server Data Size Number of key to value mappings for the agent Copyright 2013 Juniper Networks Inc 179 SRC 4 6 x Monitoring and Troubleshooting Guide Related Configuring a NIC Scenario SRC CLI Documentation Viewing Agents C Web Interface on page 188 e Viewing Agent Statistics C Web Interface on page 189 e Viewing Statistics for the NIC Process SRC CLI on page 176 e Viewing Statistics for NIC Resolvers SRC CLI on page 177 SRC CLI Commands to View NIC Resolution Data You can view the data that NIC uses during a resolution You can view all resolution data or data for a specified NIC component Table 32 on page 180 lists the commands you use to view NIC resolution information Table 32 Commands to Display NIC DataTable 23 Commands to Display NIC Data fo anlant tale Output Displayed show nic data All NIC data The output for this command includes the output for the other show nic data commands show nic data maximum results All or a specified quantity of NIC resolution data show nic data agent NIC resolution data for a specified agent show nic data resolver NIC resolution data for a specified resolver
237. ss e show nic statistics resolver show nic slot number data e show nic slot number statistics NTP Network Time Protocol NTP configuration e show ntp associations data and statistics e show ntp statistics e show ntp status Redirect server Redirect server statistics e show redirect server statistics Route Route data from the local system to a remote e show route host Copyright 2013 Juniper Networks Inc 107 SRC 4 6 x Monitoring and Troubleshooting Guide Table 25 Comparison of SRC Monitoring Options continued C Web Interface Monitor Option Information Displayed Corresponding SRC CLI Commands SAE SAE configuration data and statistics e show sae drivers e show sae interfaces e show sae licenses e show sae policies e show sae registered equipment e show sae registered login e show sae services e show sae statistics device e show sae statistics device common e show sae statistics directory show sae statistics directory connections e show sae statistics license client e show sae statistics license device e show sae statistics license local show sae statistics policy management show sae statistics process e show sae statistics radius e show sae statistics radius client e show sae statistics sessions e show sae subscribers e show sae subscribers accounting user id e show sae subscribers dn e show sae subscribers ip e show sae subscribers login name e show sae subscribers service
238. style Choices Style z brief Display only subscriber sessions terse Display subscriber session ID login name and IP address Default Detail uniper Network ne AllRights Reserved Trademark Notice Privacy Juniper woot Net In the IP Address box enter a full or partial IP address for which you want to display information or leave the box blank to display all subscriber sessions In the Maximum Results box enter the maximum number of results that you want to receive Select the Secret check box to set a flag indicating that subscriptions and service sessions from hidden services are displayed In the Slot box enter the number of the slot for which you want to display subscriber session information Select an output style from the Style list Click OK The Subscribers IP pane displays information about subscriber sessions Copyright 2013 Juniper Networks Inc 159 SRC 4 6 x Monitoring and Troubleshooting Guide Related Documentation Configuring Access to Subscriber Data SRC CLI Viewing Information About Subscriber Sessions by DN C Web Interface on page 158 Viewing Information About Subscriber Sessions by Login Name C Web Interface on page 160 Viewing Information About Subscriber Sessions by Service Name C Web Interface on page 161 Viewing Information About Subscriber Sessions by Session ID C Web Interface on page 162 Viewing Information About Subscriber Sessions by Login Name C Web Interfac
239. system logging protocol a value of 0 23 edit shared sae configuration logger sae sys 1 syslog user host set facility facility 5 Optional Specify the Message Format string that indicates how the information in an event message is printed edit shared sae configuration logger sae sys 1 syslog user host set format format Specify a Message Format string as defined in http java sun com j2se 1 4 2 docs api java text MessageFormat html The fields available for events are O Time and date of the event 1 Name of the thread generating the event 2 Text message of the event 3 Category of the event e 4 Priority of the event 6 Optional Specify the port Used for system logging a value of O 65535 Copyright 2013 Juniper Networks Inc 29 SRC 4 6 x Monitoring and Troubleshooting Guide edit shared sae configuration logger sae sys 1 syslog user host set port port Related Configuring an SRC Component to Store Log Messages in a File SRC CLI on page 26 Doc m ntation Saving System Log Messages to a File SRC CLI Configuration Statements for SRC Component Logging on page 25 Before You Configure Logging for SRC Components on page 37 Logging for SRC Components Overview on page 7 Configuration Statements for the Logrotate Utility SRC CLI Use the following statements to configure the logrotate utility system logrotate file name system logrotate file name logfiles name compr
240. t info error debug AccountingFilePeer info error debug ACPIntfListener error debug ACRMsg warning debug AddressCtx info error debug Admin info error debug AggregateServiceSession error debug AMGroupLDAPListener info debug ASRMsg warning debug Atom debug 8 Copyright 2013 Juniper Networks Inc Table 3 SAE Categories and Severity Levels continued Chapter 2 Configuring Logging for SRC Components Category Extension Severity Level BEEPDebug debug_9 ClassifyDhcp error debug Classifylnterface info error debug ClassifyUser error Client info error debug ClientMgr info error debug Commands error CommunityManager error debug CommunityMember info error debug debug_9 ConfigChecker info error debug COPSDecoder info debug_9 COPSEncoder info debug 10 Core API error debug CustomRadiusAccounting error debug CustomRadiusAuth error debug DataManagerMIData error DCImpl warning error debug DhcpManager error debug DhcpOptions error DiameterDriverManager info error debug DiameterMsgHandler warning error debug debug 8 DiameterPlacementProcessor error DiameterRouterDriver info warning error debug DiameterUnsolictedMsg info warning error debug Copyright O 2013 Juniper Networks Inc SRC 4 6 x Monitoring and Troublesh
241. t 85 62 Avg 85 82 Min 84 41 Max 87 32 E System Current 3 95 Avg 4 00 Min 3 48 Max 4 70 E Nice Current 0 00 Avg 0 00 Min 0 00 Max 0 00 E User Current 10 43 Avg 10 18 Min 9 13 Max 10 90 Viewing Graphs for Specified Time Periods from a Web Page 214 To display graphs for specified time periods from the Activity Monitor from a Web page http ip address graph amp id username amp pw password amp name graph name amp start date time amp end date time where ip address P address of the C Series Controller username Username used to log in to the C Series Controller password Password used to log in to the C Series Controller graph name Name of graph to display in the format lt component gt lt graph gt where lt graph gt is the name of the graph as specified in the C Web interface in all lowercase letters with hyphens separating words date time Date and time that data was collected for display in a graph in the format yyyyMMddHHmm where yyyy year MM month dd day HH hour mm minute For example to view the heap usage graph for the SAE component from January 15 to January 28 on the C Series Controller called c2000 for the user admin http c2000 graph amp id admin amp pw secret amp name sae heap amp start 200901150000 amp end 200901280000 Copyright 2013 Juniper Networks Inc Chapter 25 Monitoring Activity for SRC Components The SAE Heap Usage graph appears SAE Heap Us
242. t for a given service service attribute scope and virtual router To view the number of currently active service sessions for a given service service attribute scope and virtual router user host gt showsaenumber service sessions service nameservice name service attribute name service attribute name scope scope virtual router virtual router Configuring Access to Subscriber Data SRC CLI e Viewing General Information About Subscriber Sessions SRC CLI on page 133 e Viewing Information About Subscriber Sessions by DN SRC CLI on page 133 e Viewing Information About Subscriber Sessions by IP Address VPN Identifier or both SRC CLI on page 134 e Viewing Information About Subscriber Sessions by Service Name SRC CLI on page 136 Copyright 2013 Juniper Networks Inc Chapter 15 Monitoring SAE Data SRC CLI Viewing Subscriber Session Count Used by a Managed Router SRC CLI Purpose View the number of subscriber sessions used by a managed router This command displays the number of subscriber sessions used for both managed and unmanaged subscribers Unmanaged subscribers are users who do not have volume based billing It also displays the device used for the router or virtual router Action To view the number of subscriber sessions used by a managed router user host gt show sae statistics device name name terse user host gt show sae statistics device name default jrouter terse SNMP Statistics Device Name De
243. ted Router Driver for Testing C Web Interface Configuring a Simulated Router Driver for Testing C Web Interface on page 45 Configuring a Simulated Router Driver for Testing C Web Interface You configure a simulated router in the same way that you configure a real router Before you configure a simulated router driver Make sure that you configure an interface classification script for the simulated router See Classification Scripts Overview Configure the SAE to instantiate a simulated router driver for each simulated router that you create Optional Configure a session store for a simulated router driver The driver uses the session store to store subscriber sessions service sessions and policies See Configuring the Session Store Feature SRC CLI To configure simulated router drivers 1 Click Configure expand Shared expand SAE expand Configuration and then click Driver The Driver pane appears 2 From the Create new list select Simulated 3 Inthe dialog box type a name for the new simulated driver and click OK The name of the simulated driver appears in the side pane and the Driver pane 4 Enter information as described in the Help text in the main pane and click Apply For information about setting up SAE groups see Configuring an SAE Group Related Configuring Simulated Router Drivers SRC CLI on page 43 Documentation e Simulated Router Drivers for the SRC Software Overview on page 43
244. the threshold of T PDP errors A 94 Copyright 2013 Juniper Networks Inc Chapter 11 Understanding Traps Related Performance Traps on page 83 D mentation Peete Trap Numbers in Performance Traps on page 84 Configuring Performance Traps SRC CLI on page 80 SRC Redirector Performance Traps Table 19 on page 95 lists the performance traps for SRC redirector Table 19 Performance Traps SRC Redirector Alarm Threshold Levels default values Trap Event Text Displayed Interval sec R AV 3 2 1 900 redirGBLimitReached 170 S SDX Redirector During the last R Ps the global bucket limit has been reached for D times This L the threshold of T times A Related Performance Traps on page 83 D mentation ocumentato Trap Numbers in Performance Traps on page 84 Configuring Performance Traps SRC CLI on page 80 SRC ACP Performance Traps Table 20 on page 95 lists the performance traps for the SRC Admission Control Plug In SRC ACP application Table 20 Performance Traps SRC ACP Alarm Threshold Levels default values Trap Event Text Displayed Interval sec R AV AV acpHeapUsed 280 S ACP D of Java VM heap is in use 95 90 80 60 This L the threshold of T A Related Performance Traps on page 83 D mentation PEM eee Trap Numbers in Performance Traps on page 84 Configuring Performance Traps SRC CLI on page 80 Copyright 2013 Juniper Networks I
245. ulated Router Drivers SRC CLI You configure a simulated router in the same way that you configure a real router Before you configure a simulated router driver Make sure that you configure an interface classification script for the simulated router See Classification Scripts Overview Configure the SAE to instantiate a simulated router driver for each simulated router that you create Optional Configure a session store for a simulated router driver The driver uses the session store to store subscriber sessions service sessions and policies See Configuring the Session Store Feature SRC CLI Use the following configuration statements to configure simulated router drivers shared sae configuration driver simulated name driver type junos junose pcmm router version router version driver address driver address Copyright 2013 Juniper Networks Inc 43 SRC 4 6 x Monitoring and Troubleshooting Guide transport router transport router To configure simulated router drivers 1 From configuration mode access the configuration statement that configures simulated router drivers In this sample procedure west region is the name of the SAE group and default simjunos is the name of the simulated router driver edit user host edit shared sae group west region configuration driver simulated default simJunos 2 Configure the type of device that the simulated driver simulates edit shared sae gr
246. ult No value a aE In the Device Name box enter a full or partial device name for which you want to display information or leave the box blank to display all devices In the Slot box enter the number of the slot for which you want to display SNMP statistics for specific devices Select a device type from the Type list e junos Displays SNMP statistics for device drivers running Junos OS e junose cops Displays SNMP statistics for JUNOSE router drivers packetcable COPS Displays SNMP statistics for PCMM device drivers e proxy Displays SNMP statistics for third party drivers Click OK The Statistics Device Common pane displays statistics for the specified device Configuring SAE Properties for Global Default SNMP Communities for Use with JunosE Routers and Devices Running Junos OS Viewing SNMP Statistics for Devices C Web Interface on page 171 Viewing SNMP Statistics for Subscriber Sessions and Service Sessions C Web Interface on page 173 Viewing SNMP Statistics for Subscriber Sessions and Service Sessions C Web Interface View SNMP statistics about subscriber sessions and service sessions 1 Click Monitor gt SAE gt Statistics gt Sessions The Statistics Sessions pane displays statistics for subscriber sessions and service sessions Copyright 2013 Juniper Networks Inc 173 SRC 4 6 x Monitoring and Troubleshooting Guide Configure Diagnose Manage Logged in as admin Refresh Preferences
247. vers To interpret the statistics for NIC resolvers make sure that you have a good understanding of the NIC resolutions process Copyright 2013 Juniper Networks Inc 177 SRC 4 6 x Monitoring and Troubleshooting Guide Action Meaning Related Documentation 178 See NIC Resolution Process Overview user host gt show nic statistics resolver Component Statistics Component Name realms login A1l Number of Data Sources 0 Resolver Size 0 Component Statistics Component Name realms login B1 Number of Data Sources 1 Resolver Size 0 Component Statistics Component Name realms login C1 Number of Data Sources 1 Resolver Size 2140 Component Statistics Component Name realms login D1 Number of Data Sources 2 Resolver Size 0 Table 30 on page 178 describes the output fields for the show nic statistics resolver command Output fields are listed in the order in which they appear Table 30 Output Fields for show nic statistics resolver Field Name Field Description Component name Name of a resolver Resolver names have the format realms realm name resolver name The number of sources from which the resolver obtains data A data source can be an agent or another resolver Number of Data Sources Resolver Size The number of keys or number of mappings required to perform this resolution Configuring the NIC SRC CLI e Viewing Resolver Statistics C Web Interface on page 187 Viewin
248. vice Type Managed Interfaces Unmanaged Interfaces default test JunosE COPS 1 8 user host gt Related Configuring Access to Subscriber Data SRC CLI Documentation Viewing General Information About Subscriber Sessions SRC CLI on page 133 Viewing Information About Subscriber Sessions by DN SRC CLI on page 133 e Viewing Information About Subscriber Sessions by IP Address VPN Identifier or both SRC CLI on page 134 Viewing Information About Subscriber Sessions by Service Name SRC CLI on page 136 Viewing SAE SNMP Information with the CLI You can view state information that is also available through SNMP including information about counters that describe the SAE history of activity This information is the same as the information you can view from the SAE SNMP interface You can monitor SNMP by Viewing Statistics About the Directory SRC CLI on page 140 e Viewing Statistics for Directory Connections SRC CLI on page 140 e Viewing SNMP In ormation for Client Licenses SRC CLI on page 141 Viewing SNMP Information for Local Licenses SRC CLI on page 142 Viewing SNMP Information for Licenses on Virtual Routers SRC CLI on page 142 e Viewing SNMP Information for Policies SRC CLI on page 143 Viewing SNMP Information for the SAE Server Process SRC CLI on page 143 e Viewing Statistics for RADIUS Clients SRC CLI on page 144 Viewing SNMP Information for RADIUS Clients SRC CLI on page 144
249. w log files with the specified mode in octal format owner owner Create new log files with the specified owner Username group group Create new log files with the specified group Configuring the Global Options for the Logrotate Utility on page 35 Configuring Log Rotation Options for Specific Logging Configuration Files on page 35 Configuring Logging Rotation Options for System and SRC Components SRC CLI on page 36 34 Copyright 2013 Juniper Networks Inc Chapter 3 Configuring Logging for SRC Components with the CLI Configuring the Global Options for the Logrotate Utility To configure global options for the logrotate utility NOTE The CLI editing level must be set to expert to set the global options 1 From configuration mode access the configuration statement that configures global options for the logrotate utility edit user host edit system logrotate logrotate conf 2 Specify how you want to rotate and compress the log files by setting the desired options listed in Table 8 on page 32 For example to rotate log files weekly and compress them edit system logrotate logrotate conf user host set weekly user host set compress 3 Specify how you want to create new log files by setting the options listed in Table 9 on page 34 For example to use the default setting edit system logrotate logrotate conf user host edit create user host set default Configuring Log Rotation Options for Specific Logging Co
250. weekday is earlier than the weekday of the last rotation or if more than a week has passed since the last rotation monthly Optional Rotate log files monthly This option rotates log files the first time that logrotate is run in a month which is normally on the first day of the month rotate rotate Optional Rotate log files the specified number times before removing them If set to O old versions are removed rather than rotated size size Optional Rotate log files when they grow larger than the specified size in bytes e Ifthe size is followed by k the size is assumed to be in kilobytes e Ifthe size is followed by M the size is assumed to be in megabytes e Ifthe size is followed by G the size is assumed to be in gigabytes For example size 100 size 100k size 100M or size 100G are all valid settings for this option This option is mutually exclusive of the time interval options daily weekly or monthly and log files are rotated without regard for the last rotation time no create Optional Do not create new log files This option overrides the settings under the edit system logrotate logrotate conf create edit system logrotate logrotate conf logfiles name create and edit system logrotate file name logfiles name create hierarchy levels 32 Copyright 2013 Juniper Networks Inc Chapter 3 Configuring Logging for SRC Components with the CLI Table 8 Logrotate Opt
251. words e Identifies book names e Identifies distinguished names Identifies files directories and paths in text but not in command examples There are two levels of access user and privileged SRC PE Getting Started Guide o Users o UMC The etc default properties file Backslash At the end of a line indicates that the text wraps to the next line Plugin radiusAcct 1 class net juniper smgt sae plugin Radius TrackingPluginEvent Words separated by the symbol Represent a choice to select one keyword or variable to the left or right of this symbol The keyword or variable may be either optional or required diagnostic line Documentation Feedback We encourage you to provide feedback comments and suggestions so that we can improve the documentation You can send your comments to techpubs comments juniper net or fill out the documentation feedback form at https www juniper net cgi bin docbugreport If you are using e mail be sure to include the following information with your comments Document or topic name URL or page number e Software release version if applicable Requesting Technical Support Technical product support is available through the Juniper Networks Technical Assistance Center JTAC If you are a customer with an active J Care or JNASC support contract or are covered under warranty and need post sales technical support you can access our tools and resources on
252. yright 2013 Juniper Networks Inc Chapter 15 Monitoring SAE Data SRC CLI To restrict the number of displayed results user host gt show sae registered login maximum results maximum results For information about login registrations see the SRC PE Sample Applications Guide Related Removing Login Registrations SRC CLI D tati ea e Viewing Login Registrations C Web Interface on page 155 Viewing Equipment Registrations SRC CLI Purpose View information about equipment registrations You can view all equipment registrations or you can view a specific registration Action To view information about all equipment registrations user host gt show sae registered equipment To view a specific registration specify the media access control MAC address for the registration that you want to display user host gt show sae registered equipment mac address mac address To view only the MAC address of the registrations user host gt show sae registered equipment brief To restrict the number of displayed results user host gt show sae registered equipment maximum results maximum results For information about equipment registrations see the SRC PE Sample Applications Guide Related Removing Equipment Registrations C Web Interface D tati oven e Viewing Equipment Registrations C Web Interface on page 154 e Viewing Login Registrations SRC CLI on page 128 Viewing Information About Services SRC CLI Purpose V
253. ys for which you want to collect data and click OK e Viewing Graphs C Web Interface on page 212 e Viewing Graphs from a Web Page on page 212 Monitoring Activity on C Series Controllers on page 209 Viewing Graphs C Web Interface Related Documentation You can display graphs for components for which the Activity Monitor has collected data To display graphs from the Activity Monitor with the C Web interface 1 Click Graphs 2 Inthe side pane select the component and the graph that you want to display The pane for selecting the time period displayed by the graph appears 3 Select one of the preset values or enter the time range in the From and To boxes and click OK The graphs appear Collecting Data with the Activity Monitor C Web Interface on page 211 e Viewing Graphs from a Web Page on page 212 e Monitoring Activity on C Series Controllers on page 209 Viewing Graphs from a Web Page 212 You can display graphs for components for which the Activity Monitor has collected data from a Web page Before you display these graphs make sure the Activity Monitor activity and C Web interface webadm components are enabled For more secure displays configure the C Web interface to use HTTPS and use POST requests Viewing Graphs for a Preset Time Period from a Web Page on page 213 Viewing Graphs for Specified Time Periods from a Web Page on page 214 Copyright 2013 Juniper Networks Inc Chapter 25 M

SRC PE Software Monitoring and Troubleshooting Guide

Contents

Download Pdf Manuals

Related Search

Related Contents